Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Mera Keylogger POSTing keystrokes rev 2 2019-01-21
snort ET TROJAN OSX/LamePyre Screenshot Upload rev 2 2019-01-17
snort ET TROJAN AtomLogger Exfil via FTP rev 2 2019-01-17
snort ET TROJAN MageCart CnC Domain in SNI rev 2 2019-01-16
snort ET TROJAN MageCart CnC Domain in SNI rev 2 2019-01-16
snort ET TROJAN SA Banker Checkin rev 2 2019-01-16
snort ET TROJAN APT DarkHydrus DNS Lookup 27 rev 2 2019-01-15
snort ET TROJAN PS/PowerRatankba CnC DNS Lookup rev 2 2019-01-15
snort ET TROJAN APT DarkHydrus DNS Lookup 26 rev 2 2019-01-15
snort ET TROJAN PS/PowerRatankba CnC DNS Lookup rev 2 2019-01-15
snort ET TROJAN APT DarkHydrus DNS Lookup 28 rev 2 2019-01-15
snort ET TROJAN APT DarkHydrus DNS Lookup 25 rev 2 2019-01-15
snort ET TROJAN ServHelper RAT CnC Domain Observed in SNI rev 3 2019-01-14
snort ET TROJAN Possible Sharik/Smoke Loader 7zip Connectivity Check rev 1 2019-01-14
snort ET TROJAN APT DarkHydrus DNS Lookup 19 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 21 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 1 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 12 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 22 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 3 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 17 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 11 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 16 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 4 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 24 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 18 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 8 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 7 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 20 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 23 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 5 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 10 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 2 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 14 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 6 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 13 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 15 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 9 rev 2 2019-01-11
snort ET TROJAN Sourtoff Download Simda Request rev 3 2019-01-10
snort ET TROJAN Operation Cobra Venom WSF Stage 1 - File Decode Completed rev 2 2019-01-08