Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET SCAN Suspicious inbound to PostgreSQL port 5432 rev 3 2018-03-27
snort ET SCAN Suspicious inbound to Oracle SQL port 1521 rev 3 2018-03-27
snort ET SCAN Suspicious inbound to MSSQL port 1433 rev 3 2018-03-27
snort ET TROJAN Possible Sharik/Smoke Loader Microsoft Connectivity check M2 rev 1 2018-03-27
snort ET TROJAN Possible Sharik/Smoke Loader Microsoft Connectivity check M3 rev 1 2018-03-27
snort ET TROJAN Win32/Spy.Banker.AAQD Checkin rev 4 2018-03-26
snort ET TROJAN Miniduke Checkin rev 4 2018-03-22
snort ET TROJAN Hiloti loader installed successfully request rev 3 2018-03-21
snort ET WEB_CLIENT Possible Phishing Redirect Dec 13 2016 rev 3 2018-03-13
snort ET CURRENT_EVENTS Phishing Landing via Weebly.com 2016-06-22 rev 2 2018-03-13
snort ET EXPLOIT MikroTik RouterOS Chimay Red Remote Code Execution Probe rev 1 2018-03-13
snort ET CURRENT_EVENTS Ourtime Phishing Landing 2018-03-12 rev 2 2018-03-12
snort ET CURRENT_EVENTS Chalbhai Phishing Landing 2018-03-12 rev 2 2018-03-12
snort ET CURRENT_EVENTS Upgrade Email Account Phishing Landing 2018-03-12 rev 2 2018-03-12
snort ET CURRENT_EVENTS Successful Wells Fargo Phish 2018-03-12 rev 2 2018-03-12
snort ET CURRENT_EVENTS Successful O2 Phish 2018-03-12 rev 2 2018-03-12
snort ET CURRENT_EVENTS Retrieve Pending Emails Phishing Landing 2018-03-12 rev 2 2018-03-12
snort ET TROJAN Win32/FlawedAmmyy RAT CnC Checkin rev 2 2018-03-07
snort ET DOS Possible Memcached DDoS Amplification Response Outbound rev 1 2018-03-01
snort ET DOS Possible Memcached DDoS Amplification Inbound rev 1 2018-03-01
snort ET CURRENT_EVENTS Facebook Mobile Phishing Landing 2018-02-26 rev 2 2018-02-26
snort ET CURRENT_EVENTS Craigslist Phishing Landing 2018-02-26 rev 2 2018-02-26
snort ET CURRENT_EVENTS Mailbox Update Phishing Landing 2018-02-26 rev 2 2018-02-26
snort ET INFO Request for .bin with BITS/ User-Agent rev 7 2018-02-22
snort ET CURRENT_EVENTS Upgrade Advantage Phishing Landing 2018-02-22 rev 2 2018-02-22
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-22 rev 2 2018-02-22
snort ET TROJAN Evrial Stealer CnC Activity M2 rev 3 2018-02-22
snort ET CURRENT_EVENTS Office 365 Phishing Landing 2018-02-22 rev 2 2018-02-22
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-22 rev 2 2018-02-22
snort ET CURRENT_EVENTS Yahoo Phishing Landing 2018-02-20 rev 2 2018-02-20
snort ET CURRENT_EVENTS USAA Phishing Landing 2018-02-20 rev 2 2018-02-20
snort ET CURRENT_EVENTS Smartermail Phishing Landing 2018-02-20 rev 2 2018-02-20
snort ET CURRENT_EVENTS Spotify Phishing Landing 2018-02-19 rev 2 2018-02-19
snort ET CURRENT_EVENTS Successful Generic Multi-Account Phish 2018-02-16 rev 2 2018-02-16
snort ET CURRENT_EVENTS Sparkasse Phishing Landing 2018-02-15 rev 2 2018-02-15
snort ET CURRENT_EVENTS Square Phishing Landing 2018-02-15 rev 2 2018-02-15
snort ET CURRENT_EVENTS Facebook Phishing Landing 2018-02-15 rev 2 2018-02-15
snort ET CURRENT_EVENTS Chase Phishing Landing 2018-02-15 rev 2 2018-02-15
snort ET CURRENT_EVENTS Dropbox Phishing Landing 2018-02-15 rev 2 2018-02-15
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-02 M1 rev 3 2018-02-15