Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS WeTransfer Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M1 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Generic Mailbox Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M8 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS AT&T Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M7 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M2 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M9 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Generic Mailbox Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Hellion Postmaster Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Linkedin Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M4 2018-08-30 rev 2 2018-08-30
snort ET WEB_SPECIFIC_APPS MicroFocus Secure Messaging Gateway Remote Code Execution rev 2 2018-08-24
snort ET WEB_SPECIFIC_APPS Apache Struts inbound .getClass OGNL injection remote code execution attempt rev 2 2018-08-24
snort ET WEB_SPECIFIC_APPS MicroFocus Secure Messaging Gateway SQL Injection rev 2 2018-08-24
snort ET WEB_SPECIFIC_APPS Apache Struts java.lang inbound OGNL injection remote code execution attempt rev 2 2018-08-24
snort ET WEB_SPECIFIC_APPS Apache Struts inbound .getWriter OGNL injection remote code execution attempt rev 2 2018-08-24
snort ET EXPLOIT HP Enterprise VAN SDN Controller Upload Backdoor 2 rev 2 2018-08-24
snort ET TROJAN [PT MALWARE] Hacked Mikrotik C2 Request rev 2 2018-08-23
snort ET TROJAN Possible MalDoc Payload Download Nov 11 2014 rev 2 2018-08-23
snort ET SCAN Geutebrueck re_porter 7.8.974.20 Information Disclosure rev 2 2018-08-22
snort ET SCAN Hikvision IP Camera 5.4.0 Information Disclosure rev 2 2018-08-22
snort ET TROJAN [PTsecurity] MSIL/Biskvit.A Check-in rev 2 2018-08-22
snort ET SCADA SEIG SYSTEM 9 - Remote Code Execution rev 1 2018-08-21
snort ET SCADA SEIG Modbus 3.4 - Remote Code Execution rev 1 2018-08-21
snort ET TROJAN [PTsecurity] Remcos RAT Checkin 26 rev 1 2018-08-21
snort ET CURRENT_EVENTS Successful Generic Phish Phish 2018-08-21 rev 2 2018-08-21
snort ET EXPLOIT ETERNALBLUE Probe Vulnerable System Response MS17-010 rev 3 2018-08-15
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a CnC Beacon rev 2 2018-08-13
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a Checkin rev 2 2018-08-13
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a Checkin 2 rev 2 2018-08-13
snort ET INFO Adobe Flash Uncompressed in HTTP Flowbit Set rev 6 2018-08-10
snort ET CURRENT_EVENTS Microsoft Ajax Phishing Landing 2018-08-07 rev 2 2018-08-07
snort ET CURRENT_EVENTS Microsoft Account Phishing Landing 2018-08-07 rev 2 2018-08-07
snort ET CURRENT_EVENTS Alibaba Phishing Landing 2018-08-07 rev 2 2018-08-07
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-08-07 rev 2 2018-08-07
snort ET CURRENT_EVENTS Free Mobile Phishing Landing 2018-08-07 rev 2 2018-08-07
snort ET CURRENT_EVENTS Christian Mingle Phishing Landing 2018-08-07 rev 2 2018-08-07