Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SERVER DFind w00tw00t GET-Requests rev 7 2016-08-30
snort ET CURRENT_EVENTS TeamIPwned/Hellion Phishing Landing 2016-08-30 rev 1 2016-08-30
snort ET CURRENT_EVENTS Successful Chase Phish M4 2016-08-26 rev 1 2016-08-26
snort ET INFO Form Data Submitted to yolasite.com - Possible Phishing rev 1 2016-08-26
snort ET CURRENT_EVENTS Successful Chase Phish M1 2016-08-26 rev 1 2016-08-26
snort ET CURRENT_EVENTS Successful Chase Phish M3 2016-08-26 rev 1 2016-08-26
snort ET TROJAN Possible Pegasus/Trident Related HTTP Beacon 2 rev 1 2016-08-26
snort ET CURRENT_EVENTS Successful Generic Phish - JS Redirect to PDF 2016-08-24 rev 1 2016-08-25
snort ET TROJAN PNScan.2 Inbound Status Check - set rev 1 2016-08-25
snort ET TROJAN Backdoor.Win32.DarkComet Keepalive Outbound rev 1 2016-08-25
snort ET CURRENT_EVENTS Possible Google Drive Phishing Domain Aug 25 2016 rev 1 2016-08-25
snort ET INFO HTTP request for resource ending in .scr rev 3 2016-08-25
snort ET TROJAN PNScan.2 Inbound Status Check Response rev 1 2016-08-25
snort ET CURRENT_EVENTS Google Drive Phishing Landing 2016-08-25 rev 1 2016-08-25
snort ET CURRENT_EVENTS Successful Yahoo Password Strength Phish M1 2016-08-24 rev 1 2016-08-24
snort ET CURRENT_EVENTS Team IPwned Phishing Landing 2016-08-24 rev 1 2016-08-24
snort ET CURRENT_EVENTS Successful Yahoo Password Strength Phish M2 2016-08-24 rev 1 2016-08-24
snort ET CURRENT_EVENTS Successful Office 365 Phish 2016-08-24 rev 1 2016-08-24
snort ET CURRENT_EVENTS Possible Office 365 Phishing Landing 2016-08-24 rev 1 2016-08-24
snort ET CURRENT_EVENTS Successful Team IPwned Phish 2016-08-24 rev 2 2016-08-24
snort ET CURRENT_EVENTS Yahoo Password Strength Phishing Landing 2016-08-24 rev 1 2016-08-24
snort ET WEB_CLIENT Possible Phishing Data Submitted to yolasite.com M2 rev 1 2016-08-23
snort ET CURRENT_EVENTS Targeted Office 365 Phishing Landing 2016-08-23 rev 1 2016-08-23
snort ET CURRENT_EVENTS Successful Blocked Email Account Phish M2 2016-08-23 rev 1 2016-08-23
snort ET CURRENT_EVENTS Blocked Email Account Phishing Landing 2016-08-23 rev 1 2016-08-23
snort ET CURRENT_EVENTS Possible Successful Citibank Phish M1 2016-08-22 rev 1 2016-08-22
snort ET CURRENT_EVENTS Possible Successful Citibank Phish M2 2016-08-22 rev 1 2016-08-22
snort ET CURRENT_EVENTS Successful Mailbox Deactivation Phish 2016-08-19 rev 1 2016-08-19
snort ET CURRENT_EVENTS Successful Excel Phish 2016-08-19 rev 1 2016-08-19
snort ET CURRENT_EVENTS Universal Webmail Phishing Landing 2016-08-19 rev 1 2016-08-19
snort ET CURRENT_EVENTS Successful Tata Communications Phish 2016-08-19 rev 1 2016-08-19
snort ET CURRENT_EVENTS Successful Mailbox Renewal Phish 2016-08-19 rev 1 2016-08-19
snort ET CURRENT_EVENTS Adobe Shared Document Phishing Landing 2016-08-19 rev 1 2016-08-19
snort ET CURRENT_EVENTS Successful Universal Webmail Phish 2016-08-19 rev 1 2016-08-19
snort ET CURRENT_EVENTS Successful Adobe Shared Document Phish 2016-08-19 rev 1 2016-08-19
snort ET CURRENT_EVENTS Successful Comcast Phish 2016-08-18 rev 1 2016-08-18
snort ET TROJAN Aveo Checkin rev 1 2016-08-18
snort ET CURRENT_EVENTS Successful Gmail Phish 2016-08-18 rev 1 2016-08-18
snort ET TROJAN Aveo C2 Request rev 1 2016-08-18
snort ET TROJAN Aveo C2 Response rev 1 2016-08-18