Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_CLIENT Anonisma Phishing CSS 2015-12-01 rev 2 2017-10-12
snort ET CURRENT_EVENTS Successful iTunes Phish Mar 21 2014 rev 5 2017-10-12
snort ET CURRENT_EVENTS Successful iTunes Phish Mar 21 2014 rev 4 2017-10-12
snort ET CURRENT_EVENTS Windows Settings Phishing Landing Jul 22 2016 rev 3 2017-10-12
snort ET CURRENT_EVENTS Chase/Bank of America Phishing Landing Uri Structure Nov 27 2012 rev 2 2017-10-12
snort ET CURRENT_EVENTS Adobe Phishing Landing 2016-03-10 rev 2 2017-10-12
snort ET CURRENT_EVENTS Successful PayPal Phish Nov 30 2012 rev 3 2017-10-12
snort ET CURRENT_EVENTS Successful Mailbox Shutdown Phish M3 2016-05-16 rev 2 2017-10-11
snort ET CURRENT_EVENTS Successful Mailbox Shutdown Phish M2 2016-05-16 rev 2 2017-10-11
snort ET CURRENT_EVENTS Successful Mailbox Shutdown Phish M1 2016-05-16 rev 2 2017-10-11
snort ET CURRENT_EVENTS Successful Linkedin Phish 2016-11-17 rev 4 2017-10-11
snort ET POLICY PsExec service created rev 3 2017-10-11
snort ET CURRENT_EVENTS SUSPICIOUS DOC Download from commonly abused file share site rev 2 2017-10-11
snort ET CURRENT_EVENTS Successful Yahoo Phish 2016-07-11 rev 2 2017-10-11
snort ET CURRENT_EVENTS Successful Phish to Compromised Wordpress Site 2016-03-23 rev 3 2017-10-10
snort ET CURRENT_EVENTS Successful Chase Phish 2015-09-24 rev 2 2017-10-10
snort ET CURRENT_EVENTS Possible barclays .co. uk Phishing Domain 2016-06-22 rev 3 2017-10-10
snort ET CURRENT_EVENTS Possible Successful *.myjino. ru Phish 2016-12-16 rev 3 2017-10-10
snort ET CURRENT_EVENTS Successful Chase Phish 2015-09-23 rev 2 2017-10-10
snort ET CURRENT_EVENTS Successful Chase Phish 2015-09-24 rev 2 2017-10-10
snort ET TROJAN Andromeda Check-in Response rev 4 2017-10-09
snort ET CURRENT_EVENTS Successful Bank of America Phish 2016-12-05 rev 3 2017-10-06
snort ET CURRENT_EVENTS Possible USAA Phishing Domain Mar 14 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Possible Paypal Phishing Domain Mar 14 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Possible Cartasi Phishing Domain Nov 08 2016 rev 2 2017-10-06
snort ET CURRENT_EVENTS Possible HMRC Phishing Domain 2016-06-08 rev 2 2017-10-06
snort ET CURRENT_EVENTS Successful Bank of Oklahoma Phish M2 Jul 21 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Possible Chase Phishing Domain Mar 14 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Successful Bank of Oklahoma Phish M1 Jul 21 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Successful Phish Outlook Credentials Oct 01 2015 rev 3 2017-10-06
snort ET EXPLOIT Likely Struts S2-053-CVE-2017-12611 Exploit Attempt M1 rev 1 2017-10-06
snort ET CURRENT_EVENTS Possible Apple Phishing Domain 2016-06-14 rev 2 2017-10-06
snort ET CURRENT_EVENTS Successful Google Drive/Dropbox Phish Nov 20 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Possible Apple Phishing Domain Mar 14 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Possible Amazon Phishing Domain 2016-06-21 rev 2 2017-10-06
snort ET CURRENT_EVENTS Successful Apple Suspended Account Phish M2 Aug 09 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS PayPal Phishing Landing Nov 24 2014 rev 3 2017-10-05
snort ET CURRENT_EVENTS Successful Santander Phish M2 Oct 04 2017 rev 2 2017-10-04
snort ET CURRENT_EVENTS Successful Santander Phish M1 Oct 04 2017 rev 2 2017-10-04
snort ET CURRENT_EVENTS Possible BMO Bank of Montreal Phishing Landing - Title over non SSL rev 2 2017-10-03