Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Malicious Chrome Extension Click Fraud Activity via Websocket rev 4 2018-06-11
snort ET TROJAN Aurora/OneKeyLocker Ransomware CnC Checkin rev 2 2018-05-30
snort ET POLICY HTTPie User-Agent Outbound rev 1 2018-05-23
snort ET CURRENT_EVENTS Successful Phishing Attempt via GetGoPhish Phishing Tool rev 2 2018-05-23
snort ET TROJAN DDoS.XOR Checkin via HTTP rev 5 2018-05-18
snort ET TROJAN Win32/Vibem.C CnC Activity rev 1 2018-05-18
snort ET TROJAN W32/Pterodo.CL CnC Checkin rev 3 2018-05-17
snort ET TROJAN Win32/Rarog Stealer CnC Keep-Alive rev 2 2018-05-16
snort ET TROJAN InfoBot Sending Machine Details rev 2 2018-05-16
snort ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS rev 4 2018-05-16
snort ET WEB_CLIENT PDF With Embedded U3D rev 3 2018-05-16
snort ET TROJAN W32/Patchwork.Backdoor CnC Check-in M2 rev 3 2018-05-11
snort ET TROJAN W32/Patchwork.Backdoor Communicating with CnC rev 3 2018-05-11
snort ET TROJAN ELF/Muhstik Attempting to Download Payload rev 2 2018-05-11
snort ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Successful IRS Phish 2018-05-07 rev 2 2018-05-07
snort ET CURRENT_EVENTS IRS Phishing Landing 2018-05-07 rev 2 2018-05-07
snort ET CURRENT_EVENTS Possible Successful TSB Bank Phish 2018-05-07 rev 2 2018-05-07
snort ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-02 rev 2 2018-05-02
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-02 rev 2 2018-05-02
snort ET WEB_SERVER WebShell - Generic - GIF Header With HTML Form rev 4 2018-05-01
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-05-01 rev 2 2018-05-01
snort ET TROJAN Java/QRat Variant Checkin rev 1 2018-05-01
snort ET TROJAN MSIL/G1 Stealer/GravityRAT Requesting Payload rev 2 2018-04-26
snort ET TROJAN MSIL/G1 Stealer/GravityRAT Uploading File rev 2 2018-04-26
snort ET CURRENT_EVENTS Outlook Web App Phishing Landing 2018-04-26 rev 2 2018-04-26
snort ET POLICY WebRTC IP tracking Javascript rev 2 2018-04-26
snort ET CURRENT_EVENTS Chalbhai Phishing Landing Feb 18 2016 rev 4 2018-04-26
snort ET TROJAN MSIL/G2 Stealer/GravityRAT CnC Checkin rev 2 2018-04-26
snort ET TROJAN Quant Loader Download Response M2 rev 2 2018-04-20
snort ET CURRENT_EVENTS Comcast/Xfinity Phishing Landing 2018-04-19 rev 2 2018-04-20
snort ET CURRENT_EVENTS Centurylink Phishing Landing 2018-04-19 rev 2 2018-04-20
snort ET EXPLOIT Cisco Smart Install Exploitation Tool - Update Ios and Execute rev 1 2018-04-20
snort ET EXPLOIT Cisco Smart Install Exploitation Tool - ChangeConfig rev 1 2018-04-20
snort ET INFO Cisco Smart Install Protocol Observed rev 1 2018-04-20