Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO Base64 Encoded powershell.exe in HTTP Response M3 rev 1 2018-01-22
snort ET TROJAN MSIL/SamMiner CnC Checkin M2 rev 2 2018-01-22
snort ET CURRENT_EVENTS Dropbox Phishing Landing - Title over non SSL rev 2 2018-01-22
snort ET CURRENT_EVENTS Email Verification/Upgrade Phishing Landing 2018-01-22 rev 2 2018-01-22
snort ET TROJAN VBS.ARS Checkin rev 2 2018-01-22
snort ET CURRENT_EVENTS Microsoft Questionnaire Phishing Landing 2018-01-19 rev 2 2018-01-19
snort ET EXPLOIT Generic ADSL Router DNS Change Request rev 2 2018-01-19
snort ET TROJAN Formbook 0.3 Checkin rev 5 2018-01-19
snort ET EXPLOIT Possible Belkin N600DB Wireless Router Request Forgery Attempt rev 2 2018-01-19
snort ET TROJAN Win32.Drun Checkin rev 1 2018-01-19
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-01-18 M2 rev 2 2018-01-18
snort ET TROJAN Malicious Chrome Extension Requesting Websocket rev 2 2018-01-18
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-01-18 M1 rev 2 2018-01-18
snort ET CURRENT_EVENTS Possible Chase Phishing Landing - Title over non SSL rev 2 2018-01-18
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-01-18 M2 rev 2 2018-01-18
snort ET TROJAN [PTsecurity] Adwind SSL Certificate Observed rev 2 2018-01-18
snort ET WEB_CLIENT Suspicious Redirect - Possible Phishing May 25 2016 rev 4 2018-01-18
snort ET CURRENT_EVENTS Chase Phishing Landing 2018-01-18 rev 2 2018-01-18
snort ET CURRENT_EVENTS Dropbox Phishing Landing 2018-01-18 rev 2 2018-01-18
snort ET TROJAN [PTsecurity] Gozi/Ursnif Payload v14 rev 2 2018-01-17
snort ET CURRENT_EVENTS Successful Generic Phish M2 2016-10-27 rev 2 2018-01-17
snort ET TROJAN OSX/Mami Possible DNS Query to Evil DNS Server rev 2 2018-01-16
snort ET TROJAN MoneroPay Ransomware Payment Activity rev 2 2018-01-16
snort ET TROJAN OSX/Mami CnC Checkin rev 2 2018-01-14
snort ET CURRENT_EVENTS Generic Phishing Landing 2018-01-12 rev 2 2018-01-12
snort ET WEB_SPECIFIC_APPS Open Source Support Ticket System module.php Local File Inclusion Attempt rev 3 2018-01-10
snort ET CURRENT_EVENTS Successful Dropbox/Docusign Phish 2016-10-28 rev 2 2018-01-10
snort ET EXPLOIT xp_enumdsn access rev 5 2018-01-09
snort ET EXPLOIT xp_readerrorlogs access rev 5 2018-01-09
snort ET EXPLOIT xp_enumerrorlogs access rev 4 2018-01-09
snort ET TROJAN Sourtoff Receiving Simda Payload rev 3 2018-01-08
snort ET ATTACK_RESPONSE WSO - WebShell Activity - WSO Title rev 2 2018-01-08
snort ET TROJAN Oilrig Stealer CnC Checkin rev 2 2018-01-04
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-01-03 rev 2 2018-01-03
snort ET TROJAN Win32.Kazy Checkin rev 2 2018-01-02
snort ET CURRENT_EVENTS Paypal Phishing Landing Jan 09 2017 rev 2 2017-12-29
snort ET CURRENT_EVENTS Obfuscated Phishing Landing 2016-12-19 rev 2 2017-12-29
snort ET INFO PhishMe.com Phishing Landing Exercise rev 2 2017-12-29
snort ET CURRENT_EVENTS L33bo Phishing Landing 2016-03-29 rev 3 2017-12-29
snort ET CURRENT_EVENTS Microsoft Office Phishing Landing 2016-12-18 rev 2 2017-12-29