Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Linux/LuaBot CnC Beacon rev 1 2016-09-06
snort ET CURRENT_EVENTS Account Update Phishing Landing 2016-09-06 rev 1 2016-09-06
snort ET CURRENT_EVENTS Webmail Validator Phishing Landing 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS iCloud Phishing Landing 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful Facebook Phish 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful Webmail Validator Phish M2 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful Chase Phish 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful Google Drive Phish 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful Webmail Mailbox Quota Phish 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful iCloud Phish 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful Webmail Validator Phish M1 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Facebook Phishing Landing 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful Outlook WebApp Phish 2016-09-02 rev 1 2016-09-02
snort ET CURRENT_EVENTS Successful Outlook Password Update Phish M3 2016-09-01 rev 1 2016-09-01
snort ET CURRENT_EVENTS Adobe Shared Document Phishing Landing M2 2016-08-31 rev 1 2016-09-01
snort ET TROJAN Locky Ransomware Writing Instructions via SMB rev 1 2016-09-01
snort ET TROJAN Locky Ransomware Renaming File via SMB rev 1 2016-09-01
snort ET CURRENT_EVENTS Alibaba Phishing Landing 2016-08-31 rev 1 2016-09-01
snort ET CURRENT_EVENTS Google Drive Phish Landing 2016-09-01 rev 1 2016-09-01
snort ET CURRENT_EVENTS Successful WhatsApp Payment Phish 2016-09-01 rev 1 2016-09-01
snort ET CURRENT_EVENTS Successful Outlook Password Update Phish M2 2016-09-01 rev 1 2016-09-01
snort ET INFO Data Submitted to Weebly.com - Possible Phishing rev 1 2016-09-01
snort ET CURRENT_EVENTS Successful Outlook Password Update Phish M1 2016-09-01 rev 1 2016-09-01
snort ET INFO Data Submitted to Webeden.co.uk - Possible Phishing rev 1 2016-09-01
snort ET CURRENT_EVENTS Outlook 365 Encrypted Email Phishing Landing M1 2016-08-31 rev 1 2016-09-01
snort ET CURRENT_EVENTS Successful Google Docs Phish 2016-09-01 rev 1 2016-09-01
snort ET CURRENT_EVENTS Successful HealthEquity Phish 2016-09-01 rev 1 2016-09-01
snort ET CURRENT_EVENTS Adobe Shared Document Phishing Landing 2016-08-30 rev 1 2016-09-01
snort ET INFO Suspicious Yahoo Page - Possible Phishing Landing rev 2 2016-08-31
snort ET CURRENT_EVENTS Successful Dropbox Phish 2016-08-31 rev 1 2016-08-31
snort ET CURRENT_EVENTS Successful Westpac Bank Phish 2016-08-31 rev 1 2016-08-31
snort ET CURRENT_EVENTS Successful Wells Fargo Phish 2016-08-31 rev 1 2016-08-31
snort ET CURRENT_EVENTS DHL Phishing Landing 2016-08-31 rev 1 2016-08-31
snort ET CURRENT_EVENTS Successful Paypal Phish 2016-08-31 rev 1 2016-08-31
snort ET CURRENT_EVENTS Successful USAA Phish 2016-08-30 rev 1 2016-08-30
snort ET CURRENT_EVENTS Successful CIBC Phish 2016-08-30 rev 1 2016-08-30
snort ET TROJAN Possible Pegasus/Trident Related HTTP Beacon 1 rev 2 2016-08-30
snort ET CURRENT_EVENTS Successful Phish OWA Credentials 2016-08-16 rev 2 2016-08-30
snort ET WEB_SERVER DFind w00tw00t GET-Requests rev 7 2016-08-30
snort ET CURRENT_EVENTS TeamIPwned/Hellion Phishing Landing 2016-08-30 rev 1 2016-08-30