Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful PayPal Phish Nov 24 2014 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Successful Phish - Other Credentials Nov 21 2012 rev 3 2017-08-17
snort ET CURRENT_EVENTS Successful Paypal Phish Nov 24 2014 rev 2 2017-08-17
snort ET CURRENT_EVENTS L33bo Phishing Kit - Successful Credential Phish M2 2016-03-29 rev 2 2017-08-17
snort ET CURRENT_EVENTS Successful Generic PII Phish rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Google Drive Phishing Landing 2015-07-13 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Successful Yahoo Phish Nov 21 2012 rev 5 2017-08-17
snort ET CURRENT_EVENTS Google Drive Phishing Landing 2015-07-28 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Successful Gmail Phish Nov 25 2013 rev 2 2017-08-17
snort ET CURRENT_EVENTS Google Drive Phishing Landing Jul 10 2015 rev 2 2017-08-17
snort ET CURRENT_EVENTS Successful Bank of America Phish M2 2016-10-27 rev 2 2017-08-17
snort ET CURRENT_EVENTS Successful Bank of America Phish M2 2016-11-23 rev 2 2017-08-17
snort ET DOS Potential CLDAP Amplification Reflection rev 1 2017-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing M1 Jun 29 2016 rev 3 2017-08-16
snort ET CURRENT_EVENTS Successful Bank of America Phish M1 2016-11-23 rev 2 2017-08-15
snort ET CURRENT_EVENTS Likely Malicious Windows SCT Download MSXMLHTTP M1 rev 1 2017-08-15
snort ET CURRENT_EVENTS Likely Malicious Windows SCT Download MSXMLHTTP AX rev 1 2017-08-15
snort ET CURRENT_EVENTS Successful Chase Phish M1 Aug 15 2017 rev 2 2017-08-15
snort ET CURRENT_EVENTS Likely Malicious Windows SCT Download MSXMLHTTP M2 rev 1 2017-08-15
snort ET CURRENT_EVENTS Successful Bank of America Phish M1 2016-10-27 rev 3 2017-08-15
snort ET CURRENT_EVENTS Successful Yahoo Credential Phish 2015-10-03 rev 2 2017-08-15
snort ET CURRENT_EVENTS Successful Apple Phish M2 2016-09-14 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Store Phish M3 2016-12-29 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Store Phish M4 2016-12-29 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Square Phish Nov 16 2015 rev 3 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Phish M1 2016-02-23 rev 2 2017-08-14
snort ET EXPLOIT Ubiquiti Networks UniFi Cloud Key Firm v0.6.1 Host Remote Command Execution attempt rev 1 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Phish M1 2016-10-07 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Phish 2015-10-23 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Store Phish M2 2016-12-29 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Store Phish M1 2016-12-29 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Phish Oct 31 2016 rev 3 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Store Transaction Cancellation Phish 2016-08-30 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Phish M2 2016-10-07 rev 3 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Phish M3 2016-09-14 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Apple Phish M1 2016-09-14 rev 2 2017-08-14
snort ET CURRENT_EVENTS Successful Paypal Phish M2 Aug 14 2017 rev 2 2017-08-14
snort ET CURRENT_EVENTS Possible Veil Powershell Encoder B642 rev 1 2017-08-11
snort ET CURRENT_EVENTS Possible AMSI Powershell Bypass Attempt B642 rev 1 2017-08-11
snort ET CURRENT_EVENTS Possible Veil Powershell Encoder B643 rev 1 2017-08-11