Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Maersk Phishing 2016-02-25 rev 1 2016-02-25
snort ET POLICY Logmein.com/Join.me SSL Remote Control Access rev 1 2016-02-22
snort ET TROJAN Possible OceanLotus CnC Heartbeat rev 1 2016-02-18
snort ET TROJAN Possible OceanLotus Time Check to Microsoft.com rev 1 2016-02-18
snort ET EXPLOIT Possible CVE-2015-7547 Long Response to A lookup rev 1 2016-02-18
snort ET EXPLOIT Possible CVE-2015-7547 Long Response to AAAA lookup rev 1 2016-02-18
snort ET P2P BitTorrent - Torrent File Downloaded rev 3 2016-02-18
snort ET TROJAN Possible OceanLotus C2 Checkin rev 1 2016-02-18
snort ET CURRENT_EVENTS Google Maps Phishing Landing 2016-02-17 rev 1 2016-02-17
snort ET CURRENT_EVENTS Successful Google Credential Phish 2016-02-17 rev 1 2016-02-17
snort ET CURRENT_EVENTS Successful Mailbox Update Phish 2016-02-17 M2 rev 1 2016-02-17
snort ET CURRENT_EVENTS Possible Phishing Landing - Data URI Inline Javascript 2016-02-09 rev 1 2016-02-17
snort ET EXPLOIT D-Link DCS-930L Remote Command Execution attempt rev 1 2016-02-13
snort ET CURRENT_EVENTS USPS Phishing Landing 2016-02-10 rev 1 2016-02-11
snort ET TROJAN Possible Banload Downloading Executable rev 2 2016-02-11
snort ET CURRENT_EVENTS Successful WZ-REKLAMA Phish 2016-01-08 rev 3 2016-02-11
snort ET TROJAN Win32/Fluxer CnC Checkin rev 1 2016-02-05
snort ET TROJAN Download Request Containing Suspicious Filename - Crypted rev 1 2016-02-04
snort ET TROJAN Linux/ChinaZ 2.0 DDoS Bot Checkin 3 rev 2 2016-02-03
snort ET CURRENT_EVENTS Evil Redirect Compromised WP Feb 01 2016 rev 1 2016-02-02
snort ET CURRENT_EVENTS Phishing Landing via Webeden.co.uk M1 2016-01-22 rev 3 2016-02-02
snort ET CURRENT_EVENTS Successful Navy Federal Credit Union Phish 2016-02-01 rev 1 2016-02-01
snort ET CURRENT_EVENTS Navy Federal Credit Union Phishing Landing 2016-01-30 rev 1 2016-02-01
snort ET TROJAN CenterPOS User Agent Observed rev 1 2016-01-29
snort ET TROJAN CenterPOS CnC rev 1 2016-01-29
snort ET SCAN Possible WordPress xmlrpc.php BruteForce in Progress - Response rev 3 2016-01-29
snort ET TROJAN CenterPOS CnC 2 rev 1 2016-01-29
snort ET TROJAN CenterPOS Load Plugins rev 1 2016-01-29
snort ET TROJAN CenterPOS Delete Plugins rev 1 2016-01-29
snort ET CURRENT_EVENTS Successful Workspace Phish 2016-01-26 rev 1 2016-01-26
snort ET TROJAN Win32/Kaicone.A Checkin via HTTP POST rev 1 2016-01-26
snort ET CURRENT_EVENTS Canada Revenue Agency Phishing Landing 2016-01-25 rev 2 2016-01-25
snort ET TROJAN Win32/7ev3n Ransomware Initial Checkin rev 1 2016-01-22
snort ET TROJAN Win32/7ev3n Ransomware Process Checkin rev 1 2016-01-22
snort ET CURRENT_EVENTS Successful Paypal Phish 2016-01-15 M2 rev 1 2016-01-19
snort ET CURRENT_EVENTS Successful Paypal Phish M1 2016-01-19 rev 1 2016-01-19
snort ET WEB_CLIENT Suspicious LastPass URI Structure - Possible Phishing rev 1 2016-01-19
snort ET CURRENT_EVENTS Successful Paypal Phish 2016-01-15 M3 rev 1 2016-01-19
snort ET WEB_CLIENT Chrome Extension Phishing HTTP Request rev 1 2016-01-19
snort ET P2P MS WUDO Peer Sync rev 1 2016-01-15