Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Generic Epass Phish 2016-09-01 rev 2 2017-07-12
snort ET CURRENT_EVENTS Successful Adobe Shared Document Phish 2016-08-26 rev 2 2017-07-12
snort ET CURRENT_EVENTS Possible Successful Generic Phish - Three Security Questions rev 2 2017-07-12
snort ET CURRENT_EVENTS Successful Generic Webmail Phish M1 2016-11-18 rev 2 2017-07-12
snort ET CURRENT_EVENTS Successful Excel Phish Aug 15 2016 rev 2 2017-07-12
snort ET CURRENT_EVENTS Successful Netflix Payment Phish M1 Jan 04 2017 rev 2 2017-07-12
snort ET CURRENT_EVENTS Successful National Bank Phish Jan 05 2017 rev 2 2017-07-12
snort ET CURRENT_EVENTS Successful Dropbox Phish 2015-12-10 rev 2 2017-07-12
snort ET CURRENT_EVENTS Possible Successful Generic Phish - Credit Card rev 2 2017-07-12
snort ET CURRENT_EVENTS Adobe Shared Document Phishing Landing Nov 19 2015 rev 2 2017-07-12
snort ET CURRENT_EVENTS Successful Generic Webmail Phish 2016-12-02 rev 2 2017-07-12
snort ET CURRENT_EVENTS Successful RBC Royal Bank Phish Jan 30 2017 rev 2 2017-07-12
snort ET CURRENT_EVENTS Possible Capitech Internet Banking Phishing Landing - Title over non SSL rev 1 2017-07-11
snort ET WEB_CLIENT Possible Phishing Blockchain title over non SSL Jul 10 2017 rev 1 2017-07-10
snort ET EXPLOIT ETERNALBLUE Exploit M2 MS17-010 rev 2 2017-07-06
snort ET EXPLOIT Possible ETERNALBLUE Exploit M3 MS17-010 rev 3 2017-07-06
snort ET CURRENT_EVENTS Chase Mobile Phishing Landing M2 rev 1 2017-07-05
snort ET EXPLOIT Possible WINS Server Remote Memory Corruption Vulnerability rev 1 2017-06-29
snort ET CURRENT_EVENTS Watering Hole Redirect Inject Jun 28 2017 rev 1 2017-06-28
snort ET INFO Suspicious HTML Hex Obfuscated Title - Possible Phishing Landing Jun 28 2017 rev 2 2017-06-28
snort ET TROJAN Naoinstalad Checkin rev 1 2017-06-26
snort ET POLICY MOBILE Apple device leaking UDID from SpringBoard via GET rev 2 2017-06-26
snort ET TROJAN OSX/OceanLotus / ELF/RotaJakario CnC Checkin rev 1 2017-06-26
snort ET TROJAN x0Proto File Info Request rev 1 2017-06-23
snort ET TROJAN FF-RAT Stage 1 CnC Checkin rev 2 2017-06-22
snort ET TROJAN DragonOK KHRAT Downloader Receiving Payload rev 1 2017-06-20
snort ET CURRENT_EVENTS CVE-2017-0199 Common Obfus Stage 2 DL rev 1 2017-06-19
snort ET CURRENT_EVENTS RIG EK Broken/Filtered Payload Download Jun 19 2017 rev 1 2017-06-19
snort ET CURRENT_EVENTS Possible OWA Mail Phishing Landing - Title over non SSL rev 1 2017-06-16
snort ET CURRENT_EVENTS Possible Alibaba Phishing Landing - Title over non SSL rev 2 2017-06-16
snort ET CURRENT_EVENTS Possible iTunes Phishing Landing - Title over non SSL rev 2 2017-06-16
snort ET CURRENT_EVENTS Possible Yahoo Phishing Landing - Title over non SSL rev 2 2017-06-16
snort ET CURRENT_EVENTS Possible Chase Phishing Landing - Title over non SSL rev 2 2017-06-16
snort ET POLICY Crypto Coin Miner Login rev 3 2017-06-16
snort ET CURRENT_EVENTS Possible Free Mobile Phishing Landing - Title over non SSL rev 1 2017-06-16
snort ET CURRENT_EVENTS Possible Google Docs Phishing Landing - Title over non SSL rev 1 2017-06-16
snort ET CURRENT_EVENTS Possible AOL Mail Phishing Landing - Title over non SSL rev 1 2017-06-16
snort ET CURRENT_EVENTS Possible Adobe PDF Phishing Landing - Title over non SSL rev 1 2017-06-16
snort ET CURRENT_EVENTS Possible OWA Mail Phishing Landing - Title over non SSL rev 1 2017-06-16
snort ET CURRENT_EVENTS Possible DHL Phishing Landing - Title over non SSL rev 2 2017-06-16