Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32.VBKrypt.vquj Checkin rev 3 2015-08-19
snort ET TROJAN Hacking Team Scout Windows Implant Exfiltration rev 7 2015-08-18
snort ET TROJAN Hacking Team Implant Exfiltration rev 7 2015-08-18
snort ET EXPLOIT Websense Content Gateway submit_net_debug.cgi cmd_param Param Buffer Overflow Attempt rev 1 2015-08-18
snort ET TROJAN Hacking Team Elite Windows Implant Exfiltration rev 6 2015-08-18
snort ET TROJAN Hacking Team Android Implant Exfiltration rev 7 2015-08-18
snort ET TROJAN Possible DarkHotel Landing M1 rev 1 2015-08-11
snort ET TROJAN Win32.Androm.gnlb Checkin rev 3 2015-08-11
snort ET EXPLOIT Possible Firefox PDF.js Same-Origin-Bypass CVE-2015-4495 M2 rev 1 2015-08-11
snort ET TROJAN DarkHotel Initial Beacon rev 1 2015-08-11
snort ET EXPLOIT Possible Firefox PDF.js Same-Origin-Bypass CVE-2015-4495 M1 rev 1 2015-08-10
snort ET TROJAN W32/Alina.POS-Trojan Checkin rev 3 2015-08-05
snort ET TROJAN APT CozyCar SSL Cert 1 rev 2 2015-08-04
snort ET TROJAN Sakula/Mivast RAT CnC Beacon 6 rev 1 2015-08-01
snort ET TROJAN Sakula/Mivast RAT CnC Beacon 7 rev 2 2015-08-01
snort ET TROJAN Possible Java/Downloader Observed in Pawn Storm CVE-2015-2590 1 rev 1 2015-07-31
snort ET TROJAN URI Struct Observed in Pawn Storm CVE-2015-2950 rev 1 2015-07-31
snort ET TROJAN Possible Java/Downloader Observed in Pawn Storm CVE-2015-2590 2 rev 1 2015-07-31
snort ET TROJAN Potao CnC rev 1 2015-07-31
snort ET TROJAN W32/Alina.POS-Trojan Checkin rev 3 2015-07-31
snort ET CURRENT_EVENTS ScanBox Jun 06 2015 M2 T1 rev 1 2015-07-28
snort ET CURRENT_EVENTS ScanBox Jun 06 2015 M1 T1 rev 1 2015-07-28
snort ET CURRENT_EVENTS DRIVEBY Possible Goon/Infinity/Magnitude EK SilverLight Exploit rev 2 2015-07-28
snort ET CURRENT_EVENTS ScanBox Jun 06 2015 M3 T1 rev 1 2015-07-28
snort ET TROJAN Backdoor.Win32.Xyligan Checkin rev 3 2015-07-24
snort ET TROJAN W2KM_BARTALEX Downloading Payload M2 rev 1 2015-07-24
snort ET TROJAN Java/QRat Checkin rev 1 2015-07-22
snort ET TROJAN Linux/DDoS.Sotdas/IptabLex Checkin rev 2 2015-07-21
snort ET WEB_SERVER IIS ISN BackDoor Command Get Logpath rev 5 2015-07-20
snort ET TROJAN Win32/Bancos.AMM CnC Beacon rev 3 2015-07-20
snort ET TROJAN Tsyrval Panda CnC Beacon rev 1 2015-07-20
snort ET WEB_SERVER IIS ISN BackDoor Command Delete Log rev 5 2015-07-20
snort ET TROJAN Possible CVE-2015-2424 RTF Dropping Sofacy rev 1 2015-07-17
snort ET TROJAN APT CozyCar SSL Cert 3 rev 1 2015-07-15
snort ET TROJAN W32/Banload.VZS Banker POST CnC Beacon 1 rev 1 2015-07-10
snort ET TROJAN W32/Banload.VZS Banker POST CnC Beacon 2 rev 1 2015-07-10
snort ET MOBILE_MALWARE Android BatteryBotPro Checkin 2 rev 2 2015-07-09
snort ET TROJAN Win32/Denisca.A CnC Beacon 2 rev 1 2015-07-07
snort ET TROJAN Win32/Denisca.A CnC Beacon rev 1 2015-07-07
snort ET WEB_SPECIFIC_APPS WEB-PHP RCE PHPBB 2004-1315 rev 1 2015-07-07