Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Kriptovor SMTP Traffic rev 1 2015-04-09
snort ET EXPLOIT Netgear DGN1000B Router DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT TP-LINK Known Malicious Router DNS Change GET Request rev 1 2015-04-09
snort ET TROJAN TinyLoader.B1 Checkin x86 rev 2 2015-04-08
snort ET TROJAN TinyLoader.B1 Sending Processes rev 1 2015-04-08
snort ET TROJAN TinyLoader.B2 Checkin no architecture rev 1 2015-04-08
snort ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 2 rev 1 2015-04-08
snort ET TROJAN TinyLoader.B1 Checkin x64 rev 1 2015-04-08
snort ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 1 rev 1 2015-04-08
snort ET EXPLOIT Motorola SBG900 Router DNS Change GET Request rev 1 2015-04-08
snort ET EXPLOIT Linksys WRT54GL Router DNS Change POST Request rev 1 2015-04-08
snort ET SCAN H.323 Scanning device rev 2 2015-04-08
snort ET EXPLOIT TP-LINK TL-WR340G Router DNS Change GET Request rev 1 2015-04-08
snort ET TROJAN Possible Win32/SillyFDC WordPress Traffic rev 1 2015-04-07
snort GPL TELNET Bad Login rev 11 2015-04-06
snort ET TROJAN Miniduke variant C&C activity rev 2 2015-04-03
snort ET TROJAN Hangover related campaign Response rev 2 2015-04-03
snort ET TROJAN Win32/Kelihos.F exe Download 2 rev 3 2015-04-03
snort ET TROJAN Win32/Injector.BXEW Variant HTTP CnC Beacon 2 rev 1 2015-04-02
snort ET TROJAN Win32/Injector.BXEW Variant HTTP CnC Beacon 3 rev 1 2015-04-02
snort ET TROJAN Win32/Injector.BXEW Variant HTTP CnC Beacon 1 rev 1 2015-04-02
snort ET TROJAN Skyfall fake Skype install link rev 2 2015-04-01
snort ET POLICY Remote Access - RView - Host - *.rview.com rev 1 2015-03-31
snort ET TROJAN Volatile Cedar Win32.Explosive CnC Beacon 3 rev 1 2015-03-31
snort ET TROJAN Vawtrak/NeverQuest Server Response rev 3 2015-03-27
snort ET TROJAN Win32/Teslacrypt Ransomware HTTP CnC Beacon M1 rev 3 2015-03-27
snort ET EXPLOIT Metasploit Plugin-Detect Posting Data 5 rev 1 2015-03-26
snort ET EXPLOIT Metasploit Plugin-Detect Posting Data 6 rev 1 2015-03-26
snort ET EXPLOIT Metasploit Plugin-Detect Posting Data 7 rev 1 2015-03-26
snort ET EXPLOIT Metasploit Browser Exploit Server Plugin Detect rev 3 2015-03-26
snort ET EXPLOIT Metasploit Browser Exploit Server Plugin Detect 2 rev 1 2015-03-26
snort ET TROJAN Win32/TrojanProxy.JpiProx.B CnC Beacon 1 rev 1 2015-03-25
snort ET TROJAN Win32/TrojanProxy.JpiProx.B CnC Beacon 2 rev 1 2015-03-25
snort ET TROJAN Linux.DDoS Checkin rev 4 2015-03-23
snort ET MOBILE_MALWARE Android.Trojan.SMSSend.Y rev 4 2015-03-23
snort ET TROJAN KeyLogger related to FindPOS CnC Beacon rev 1 2015-03-21
snort ET CURRENT_EVENTS RIG Payload URI Struct March 20 2015 rev 1 2015-03-21
snort ET TROJAN FindPOS Checkin rev 2 2015-03-21
snort ET TROJAN Win32/Teslacrypt Ransomware HTTP CnC Beacon M2 rev 2 2015-03-20
snort ET TROJAN RocketKitten APT Checkin rev 2 2015-03-19