Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_CLIENT HTA File Download Flowbit Set rev 1 2017-04-10
snort ET CURRENT_EVENTS Successful HM Revenue & Customs Phish M2 Apr 07 2017 rev 1 2017-04-07
snort ET CURRENT_EVENTS Successful HM Revenue & Customs Phish M1 Apr 07 2017 rev 1 2017-04-07
snort ET EXPLOIT TP-Link Archer C2 and Archer C20i Remote Code Execution rev 2 2017-04-07
snort ET TROJAN Trojan Generic - POST To gate.php with no accept headers rev 2 2017-04-05
snort ET CURRENT_EVENTS Terror EK CVE-2016-0189 Exploit rev 1 2017-04-04
snort ET TROJAN Felismus CnC Beacon 1 rev 1 2017-04-04
snort ET CURRENT_EVENTS Terror EK CVE-2015-2419 Exploit rev 1 2017-04-04
snort ET CURRENT_EVENTS Terror EK CVE-2016-0189 Exploit M2 rev 1 2017-04-04
snort ET TROJAN Win32/Neutrino Checkin 6 rev 2 2017-04-04
snort ET MOBILE_MALWARE Android.C2P.Qd!c Ransomware CnC Beacon rev 1 2017-03-31
snort ET CURRENT_EVENTS MalDoc Retrieving Payload March 30 2017 rev 1 2017-03-30
snort ET TROJAN Win32/Neutrino Checkin 2 rev 2 2017-03-29
snort ET TROJAN Win32/Neutrino Cookie rev 4 2017-03-29
snort ET TROJAN Win32/Neutrino Bot Fake 404 Checkin Response rev 2 2017-03-29
snort ET TROJAN Win32/Neutrino ping rev 3 2017-03-29
snort ET TROJAN Win32/Neutrino Checkin 3 rev 2 2017-03-29
snort ET TROJAN Win32/Neutrino Checkin rev 4 2017-03-29
snort ET TROJAN Win32/Neutrino CC dump rev 2 2017-03-29
snort ET MOBILE_MALWARE Android/Opfake.A GetTask CnC Beacon rev 3 2017-03-29
snort ET CURRENT_EVENTS Successful RBC Royal Bank Phish Mar 27 2017 rev 1 2017-03-27
snort ET CURRENT_EVENTS Successful Paypal Phish Mar 22 2017 rev 2 2017-03-22
snort ET TROJAN Win32/CryptFile2 / Revenge Ransomware Checkin M3 rev 2 2017-03-17
snort ET POLICY HTTP Request to a *.tk domain rev 9 2017-03-16
snort ET CURRENT_EVENTS Microsoft Live Email Account Phishing Landing Mar 16 2017 rev 1 2017-03-16
snort ET TROJAN MagikPOS CnC Beacon rev 2 2017-03-16
snort ET SHELLCODE Linux/x86-64 - Reverse Shell Shellcode rev 1 2017-03-16
snort ET TROJAN MagikPOS Downloader Checkin rev 2 2017-03-16
snort ET CURRENT_EVENTS Successful Apple Phish M2 Mar 15 2017 rev 1 2017-03-15
snort ET EXPLOIT IBM WebSphere - RCE Java Deserialization rev 2 2017-03-15
snort ET SHELLCODE Linux/x86-64 - Polymorphic Flush IPTables Shellcode rev 1 2017-03-15
snort ET CURRENT_EVENTS Successful Apple Phish M1 Mar 15 2017 rev 2 2017-03-15
snort ET CURRENT_EVENTS Successful Paypal Phish Mar 14 2017 rev 1 2017-03-14
snort ET CURRENT_EVENTS Terror EK Payload Download M1 Mar 14 2017 rev 2 2017-03-14
snort ET CURRENT_EVENTS Successful Instagram Phish Mar 14 2017 rev 1 2017-03-14
snort ET CURRENT_EVENTS INTERAC Payment Multibank Phishing Landing Mar 14 2017 rev 2 2017-03-14
snort ET CURRENT_EVENTS Terror EK Payload Download M2 Mar 14 2017 rev 2 2017-03-14
snort ET TROJAN Possible Pony Payload DL rev 2 2017-03-13
snort ET CURRENT_EVENTS Successful Bradesco Bank Phish M2 Jan 05 2017 rev 3 2017-03-13
snort ET CURRENT_EVENTS Successful National Bank Phish Mar 13 2017 rev 1 2017-03-13