Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO WinHttp AutoProxy Request wpad.dat Possible BadTunnel rev 1 2016-06-23
snort ET CURRENT_EVENTS Webmail Phishing Landing 2016-06-22 rev 1 2016-06-22
snort ET WEB_SERVER Apache Continuum Arbitrary Command Execution rev 2 2016-06-22
snort ET CURRENT_EVENTS Email Termination Phishing Landing 2016-06-22 rev 1 2016-06-22
snort ET TROJAN JKDDOS Bot CnC Phone Home Message rev 3 2016-06-21
snort ET CURRENT_EVENTS Terse POST to Wordpress Folder - Probable Successful Phishing M3 rev 1 2016-06-16
snort ET TROJAN FOX-SRT ShimRatReporter check-in rev 1 2016-06-15
snort ET TROJAN JS/RAA Ransomware check-in rev 1 2016-06-15
snort ET WEB_CLIENT Google Chrome Pdfium JPEG2000 Heap Overflow rev 1 2016-06-13
snort ET TROJAN Bolek HTTP Checkin rev 1 2016-06-10
snort ET TROJAN Win32/Zeprox.B Checkin rev 4 2016-06-10
snort ET CURRENT_EVENTS Successful US Bank Phish 2016-06-09 M2 rev 1 2016-06-09
snort ET CURRENT_EVENTS Successful US Bank Phish 2016-06-09 M1 rev 1 2016-06-09
snort ET CURRENT_EVENTS Successful DrSpam Phish 2016-06-08 M1 rev 1 2016-06-08
snort ET CURRENT_EVENTS Successful DrSpam Phish 2016-06-08 M2 rev 1 2016-06-08
snort ET CURRENT_EVENTS DrSpam Phishing Landing CSS 2016-06-08 rev 1 2016-06-08
snort ET CURRENT_EVENTS DrSpam Phishing Landing 2016-06-08 rev 1 2016-06-08
snort ET TROJAN Qarallax RAT Keepalive C2 rev 1 2016-06-08
snort ET TROJAN Qarallax RAT Downloading Modules rev 1 2016-06-08
snort ET TROJAN BandarChor/CryptON Ransomware Checkin rev 2 2016-06-08
snort ET TROJAN FastPOS RAM Scraper Sending Details rev 1 2016-06-07
snort ET TROJAN FastPOS Sending Keystrokes rev 1 2016-06-07
snort ET SCADA CitectSCADA ODBC Overflow Attempt rev 8 2016-06-07
snort ET TROJAN FastPOS Reporting Error Code rev 1 2016-06-06
snort ET TROJAN FastPOS Version Checkin rev 1 2016-06-06
snort ET TROJAN FastPOS Sending Status Logs rev 1 2016-06-06
snort ET TROJAN FastPOS Initial Checkin rev 1 2016-06-06
snort ET TROJAN FastPOS Successful Software Update Request rev 1 2016-06-06
snort ET TROJAN FastPOS Software Update Request rev 1 2016-06-06
snort ET WEB_SERVER Aribitrary File Upload Vulnerability in WP Mobile Detector rev 1 2016-06-03
snort ET CURRENT_EVENTS Successful Email Login Phish 2016-06-02 rev 1 2016-06-02
snort ET TROJAN Patchwork APT CnC Beacon 2 rev 1 2016-06-02
snort ET CURRENT_EVENTS Avast Phishing Landing 2016-06-02 rev 1 2016-06-02
snort ET CURRENT_EVENTS Generic Email Login Phishing Landing 2016-06-02 rev 1 2016-06-02
snort ET CURRENT_EVENTS Successful Excel Shared Document Phish 2016-06-02 rev 1 2016-06-02
snort ET WEB_SERVER Possible CVE-2016-5118 Exploit MVG attempt M1 rev 1 2016-06-01
snort ET WEB_SERVER Possible CVE-2016-5118 Exploit SVG attempt M1 rev 1 2016-06-01
snort ET WEB_SERVER Possible CVE-2016-5118 Exploit SVG attempt M2 rev 1 2016-06-01
snort ET WEB_SERVER Possible CVE-2016-5118 Exploit MVG attempt M2 rev 1 2016-06-01
snort ET TROJAN Ransomware Locky CnC Beacon 4 21 May rev 1 2016-05-31