Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_CLIENT APT SWC PluginDetect Landing Cookie 2015-10-15 rev 1 2015-10-15
snort ET CURRENT_EVENTS Possible Magento Directory Traversal Attempt rev 1 2015-10-15
snort ET TROJAN JS/Nemucod.M.gen downloading EXE payload rev 1 2015-10-15
snort ET TROJAN JS/Nemucod.M.gen downloading PDF payload rev 1 2015-10-15
snort ET CURRENT_EVENTS Successful Outlook Web App Phish 2015-10-15 rev 1 2015-10-14
snort ET SCAN abdullkarem Wordpress PHP Scanner rev 1 2015-10-14
snort ET CURRENT_EVENTS Successful Samsung Portal Phish 2015-10-13 rev 1 2015-10-13
snort ET TROJAN Win32/Kelihos.F Checkin rev 3 2015-10-13
snort ET CURRENT_EVENTS Netgear Multiple Router Auth Bypass rev 1 2015-10-12
snort ET WEB_CLIENT Proxy - Fiddler Proxy Certificate Seen rev 1 2015-10-10
snort ET WEB_CLIENT Proxy - BurpSuite PortSwigger Proxy Certificate Seen rev 1 2015-10-10
snort ET WEB_CLIENT Proxy - OWASP Zed Attack Proxy Certificate Seen rev 1 2015-10-10
snort ET TROJAN Gh0st Remote Access Trojan Encrypted Session To CnC Server rev 4 2015-10-09
snort ET MOBILE_MALWARE Android/Kemoge Checkin 2 rev 1 2015-10-08
snort ET TROJAN Linux/dtool IRC Command Complete 1 rev 4 2015-10-08
snort ET TROJAN Linux/dtool IRC Command Complete 2 rev 4 2015-10-08
snort ET TROJAN Linux/dtool IRC Command Complete 3 rev 3 2015-10-08
snort ET CURRENT_EVENTS Successful Webmail Update Phish 2015-10-08 rev 1 2015-10-08
snort ET MOBILE_MALWARE Android/Kemoge Checkin rev 1 2015-10-08
snort ET TROJAN Win32/Neshta.A Posting Data rev 2 2015-10-07
snort ET TROJAN StartPage Userclass HTTP Request rev 1 2015-10-07
snort ET CURRENT_EVENTS KaiXin Landing Page Oct 05 2015 rev 2 2015-10-06
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2015-10-03 rev 1 2015-10-03
snort ET CURRENT_EVENTS Successful Bank of America Phish 2015-10-02 rev 1 2015-10-02
snort ET POLICY Hola VPN Activity - X-Hola-* Headers rev 1 2015-10-02
snort ET TROJAN Java/QRat Retrieving PE rev 1 2015-10-02
snort ET CURRENT_EVENTS Successful Mailbox Update Credential Phish 2015-10-02 rev 1 2015-10-02
snort ET CURRENT_EVENTS Successful Phish Gmail Recovery Information 2015-10-01 rev 1 2015-10-01
snort ET WEB_CLIENT Phishing Fake Document Loading Error 2015-10-01 rev 1 2015-10-01
snort ET TROJAN Ransomware Win32/WinPlock.A CnC Beacon 2 rev 3 2015-09-30
snort ET MOBILE_MALWARE Android/Koler.C Checkin rev 5 2015-09-30
snort ET CURRENT_EVENTS Evil Redirector Leading To EK Sep 30 2015 rev 1 2015-09-30
snort ET CURRENT_EVENTS Evil JavaScript Injection Sep 29 2015 rev 1 2015-09-30
snort ET CURRENT_EVENTS Evil Redirector Sep 29 2015 rev 1 2015-09-30
snort ET TROJAN Ransomware Win32/WinPlock.A CnC Beacon 3 rev 3 2015-09-30
snort ET TROJAN Ransomware Win32/WinPlock.A Successfully Installed CnC Beacon rev 2 2015-09-30
snort ET TROJAN W32/DirCrypt.Ransomware CnC Checkin rev 5 2015-09-29
snort ET TROJAN XcodeGhost CnC M2 rev 1 2015-09-25
snort ET TROJAN Ursnif Variant CnC Data Exfil rev 2 2015-09-24
snort ET TROJAN Possible Trojan.APT.9002 POST rev 3 2015-09-24