Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Bank of America Phish 2015-11-06 rev 3 2017-10-24
snort ET CURRENT_EVENTS Successful Yahoo Phish M1 2016-06-15 rev 2 2017-10-24
snort ET CURRENT_EVENTS Adobe Shared Document Phish Landing 2015-11-14 rev 2 2017-10-24
snort ET CURRENT_EVENTS Successful Generic AES Phish M1 Oct 24 2017 rev 2 2017-10-24
snort ET CURRENT_EVENTS Possible BadRabbit Driveby Download M2 Oct 24 2017 rev 2 2017-10-24
snort ET CURRENT_EVENTS Successful Generic Brand Phish 2016-12-01 rev 2 2017-10-23
snort ET TROJAN Locky Intermediate Downloader rev 2 2017-10-23
snort ET TROJAN Possible Dragonfly APT Activity HTTP URI OPTIONS rev 2 2017-10-23
snort ET TROJAN Possible Dragonfly APT Activity - SMB credential harvesting rev 1 2017-10-23
snort ET MOBILE_MALWARE Android JadeRAT CnC Beacon rev 1 2017-10-23
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 2 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET CURRENT_EVENTS Successful OX App Suite Phish 2017-10-12 rev 3 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Tordal/Hancitor/Chanitor Checkin rev 4 2017-10-18
snort ET CURRENT_EVENTS Successful DHL Phish 2015-11-14 rev 2 2017-10-17
snort ET TROJAN Trojan.JS.Agent.dwz Checkin rev 1 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2015-09-30 rev 2 2017-10-17
snort ET CURRENT_EVENTS DHL Phishing Landing 2016-07-11 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2015-09-17 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful Onedrive Phish 2016-05-16 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2016-02-09 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2016-07-11 rev 2 2017-10-17
snort ET CURRENT_EVENTS DHL Phish Landing 2015-11-14 rev 2 2017-10-17
snort ET CURRENT_EVENTS DHL Phishing Landing 2016-01-07 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2015-09-14 rev 2 2017-10-17
snort ET CURRENT_EVENTS Anonisma AES Crypto Observed in Javascript - Possible Phishing Landing 2015-12-29 rev 2 2017-10-16
snort ET WEB_CLIENT Potential Data URI Phishing Oct 02 2015 rev 2 2017-10-13
snort ET CURRENT_EVENTS Successful Fake Webmail Quota Phish 2015-09-10 rev 2 2017-10-13
snort ET CURRENT_EVENTS Possible Successful Apple Phish 2015-07-30 rev 2 2017-10-13
snort ET CURRENT_EVENTS Possible Successful Apple Phish 2015-07-27 rev 2 2017-10-13
snort ET CURRENT_EVENTS Possible Apple Store Phish Landing 2015-07-30 rev 2 2017-10-13
snort ET CURRENT_EVENTS Successful Apple Phish M3 Feb 06 2016 rev 2 2017-10-13