Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN W32/Kazy.325252 Variant CnC Beacon 2 rev 2 2015-07-06
snort ET TROJAN W32/Kazy.325252 Variant CnC Beacon 1 rev 2 2015-07-06
snort ET TROJAN Mocelpa Client Hello CnC Beacon rev 1 2015-07-06
snort ET CURRENT_EVENTS Possible Elasticsearch CVE-2015-1427 Exploit Campaign SSL Certificate rev 1 2015-06-26
snort ET TROJAN DDoS.XOR Checkin 3 rev 3 2015-06-24
snort ET TROJAN DDoS.XOR Checkin 2 rev 3 2015-06-24
snort ET TROJAN Backdoor.Elise CnC Beacon 3 M1 rev 3 2015-06-23
snort ET TROJAN Win32/Keatep.B Checkin rev 6 2015-06-23
snort ET TROJAN Backdoor.Elise CnC Beacon 1 M2 rev 4 2015-06-23
snort ET TROJAN Linux/ChinaZ DDoS Bot Checkin 2 rev 1 2015-06-22
snort ET TROJAN Backdoor.Elise CnC Beacon 3 M2 rev 2 2015-06-19
snort ET CURRENT_EVENTS Suspicious JS Observed in Unknown EK Landing rev 1 2015-06-19
snort ET CURRENT_EVENTS Likely Malicious wininet UA Downloading EXE rev 1 2015-06-19
snort ET CURRENT_EVENTS KaiXin Landing M4 rev 3 2015-06-18
snort ET CURRENT_EVENTS Likely Evil JS used in Unknown EK Landing rev 2 2015-06-14
snort ET TROJAN Possible Duqu 2.0 Request rev 1 2015-06-11
snort ET TROJAN Emotet v2 Exfiltrating Outlook information rev 2 2015-06-11
snort ET TROJAN Poweliks Clickfraud CnC M1 rev 1 2015-06-10
snort ET TROJAN Poweliks Clickfraud CnC M3 rev 1 2015-06-10
snort ET TROJAN Poweliks Clickfraud CnC M2 rev 1 2015-06-10
snort ET TROJAN Possible Duqu 2.0 Accessing backdoor over 443 rev 1 2015-06-10
snort ET TROJAN Win32/Zacom.A CnC Beacon 1 rev 1 2015-06-09
snort ET TROJAN Sakula/Mivast RAT CnC Beacon 2 rev 1 2015-06-08
snort ET TROJAN Sakula/Mivast RAT CnC Beacon 3 rev 1 2015-06-08
snort ET TROJAN Sakula/Mivast RAT CnC Beacon 1 rev 4 2015-06-08
snort ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Wroba.m Checkin rev 1 2015-06-05
snort ET TROJAN Databack CnC rev 2 2015-06-05
snort ET TROJAN IOS.Oneclickfraud HTTP Host rev 1 2015-06-05
snort ET TROJAN KeyBase Keylogger Checkin rev 3 2015-06-05
snort ET TROJAN Linux/Moose HTTP CnC Beacon rev 2 2015-05-27
snort ET TROJAN Linux/Moose NAT Traversal CnC Beacon set rev 1 2015-05-26
snort ET TROJAN Possible Linux/Moose Telnet CnC Beacon rev 1 2015-05-26
snort ET TROJAN H1N1 Loader CnC Beacon M1 rev 1 2015-05-22
snort ET TROJAN H1N1 Loader CnC Beacon M2 rev 1 2015-05-22
snort ET TROJAN JavaScriptBackdoor HTTP GET CnC Beacon rev 1 2015-05-21
snort ET TROJAN Suspicious X-mailer Synapse Inbound to SMTP Server rev 1 2015-05-21
snort ET TROJAN Worm.VBS.Jenxcus.H User Agent rev 1 2015-05-20
snort ET TROJAN Possible APT17 CnC Content in Public Website rev 1 2015-05-19
snort ET TROJAN Yahoyah CnC Beacon rev 1 2015-05-18
snort ET CURRENT_EVENTS DNSChanger EK Secondary Landing May 12 2015 M2 rev 1 2015-05-16