Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Apple Phishing Landing M2 Feb 13 2017 rev 1 2017-02-13
snort ET CURRENT_EVENTS Successful Apple Phish M2 2016-09-29 rev 2 2017-02-09
snort ET WEB_CLIENT Tech Support Phone Scam Landing Feb 09 2017 rev 1 2017-02-09
snort ET TROJAN Possible iKittens OSX MacDownloader CNC Beacon rev 1 2017-02-07
snort ET CURRENT_EVENTS Possible Successful Craigslist Phishing Domain Feb 07 2017 rev 1 2017-02-07
snort ET CURRENT_EVENTS Possible Successful Discover Phish Feb 02 2017 rev 2 2017-02-03
snort ET CURRENT_EVENTS Possible Successful Cartasi Phishing Domain Feb 02 2017 rev 1 2017-02-02
snort ET CURRENT_EVENTS Possible Successful Ebay Phishing Domain Feb 02 2017 rev 1 2017-02-02
snort ET CURRENT_EVENTS Possible Successful Bank of America Phishing Domain Feb 02 2017 rev 1 2017-02-02
snort ET CURRENT_EVENTS Possible Successful USAA Phishing Domain Feb 02 2017 rev 1 2017-02-02
snort ET CURRENT_EVENTS Possible Successful Linkedin Phishing Domain Feb 02 2017 rev 1 2017-02-02
snort ET CURRENT_EVENTS Possible Successful Apple Phishing Domain Feb 02 2017 rev 1 2017-02-02
snort ET CURRENT_EVENTS Possible Successful Chase Phish Feb 02 2017 rev 1 2017-02-02
snort ET CURRENT_EVENTS Possible Successful Google Drive Phishing Domain Feb 02 2017 rev 1 2017-02-02
snort ET WEB_SPECIFIC_APPS Netgear WNR2000v5 Possible Serial Number Leak rev 1 2017-02-02
snort ET INFO SUSPICIOUS Possible Evil Download wsf Double Ext No Referer rev 2 2017-02-02
snort ET CURRENT_EVENTS Possible Successful Paypal Phishing Domain Feb 02 2017 rev 1 2017-02-02
snort ET CURRENT_EVENTS Successful Chase Phishing 2016-12-12 rev 2 2017-02-01
snort ET CURRENT_EVENTS Possible Ebay Phishing Domain Jan 30 2017 rev 1 2017-01-31
snort ET CURRENT_EVENTS Successful Google Drive Phish 2016-08-18 rev 2 2017-01-31
snort ET CURRENT_EVENTS Possible Successful Ebay Phish Jan 30 2017 rev 1 2017-01-31
snort ET CURRENT_EVENTS EITest SocEng Inject Jan 15 2017 EXE Download rev 1 2017-01-31
snort ET CURRENT_EVENTS Possible Broken/Filtered RIG EK Payload Download rev 1 2017-01-27
snort ET TFTP Outbound TFTP Write Request rev 4 2017-01-25
snort ET TROJAN X2000M.Agent Checkin Jan 24 2017 rev 1 2017-01-25
snort ET TROJAN Sage Ransomware Checkin rev 1 2017-01-25
snort ET CURRENT_EVENTS Possible Successful Generic Paypal Phish Jan 23 2016 rev 2 2017-01-24
snort ET CURRENT_EVENTS Possible Microsoft RDP Client for Mac RCE rev 1 2017-01-24
snort ET WEB_SERVER Possible Encrypted Webshell Download rev 2 2017-01-23
snort ET WEB_CLIENT Tech Support Phone Scam Landing M1 Jan 20 2017 rev 1 2017-01-20
snort ET USER_AGENTS SideStep User-Agent rev 31 2017-01-20
snort ET TROJAN Evil JS Ransomware rev 1 2017-01-18
snort ET TROJAN Dooptroop Dropper Checkin rev 3 2017-01-18
snort ET TROJAN Dooptroop CnC Beacon rev 3 2017-01-18
snort ET CURRENT_EVENTS Successful Windows Live Account Phish 2016-10-26 rev 2 2017-01-18
snort ET CURRENT_EVENTS Successful Yahoo Phish 2016-10-27 rev 3 2017-01-17
snort ET TROJAN Pony DLL Download M2 rev 1 2017-01-13
snort ET WEB_SERVER SQL Injection Select Sleep Time Delay rev 2 2017-01-13
snort ET TROJAN Suspicious UA Mozilla / 4.0 rev 5 2017-01-12
snort ET TROJAN Maldoc Second Stage VBS Downloader with URL Padding rev 1 2017-01-12