Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Arid Viper APT Checkin 2 rev 1 2015-02-17
snort ET TROJAN Arid Viper APT Transmitting Date rev 1 2015-02-17
snort ET TROJAN Carbanak APT CnC Beacon 2 rev 1 2015-02-17
snort ET TROJAN Arid Viper APT Transmitting Serial rev 1 2015-02-17
snort ET TROJAN Arid Viper APT Checkin 1 rev 1 2015-02-17
snort ET CURRENT_EVENTS Unknown EK Landing Feb 16 2015 b64 2 M2 rev 1 2015-02-16
snort ET CURRENT_EVENTS Unknown EK Landing Feb 16 2015 b64 3 M2 rev 1 2015-02-16
snort ET CURRENT_EVENTS Unknown EK Landing Feb 16 2015 b64 2 M1 rev 1 2015-02-16
snort ET DOS MC-SQLR Response Inbound Possible DDoS Target rev 3 2015-02-13
snort ET DOS MC-SQLR Response Outbound Possible DDoS Participation rev 4 2015-02-13
snort ET TROJAN Upatre Common URI Struct Dec 01 2014 rev 7 2015-02-13
snort ET TROJAN Mazilla Suspicious User-Agent Jan 15 2015 rev 3 2015-02-12
snort ET POLICY I2P Seeds File Download rev 1 2015-02-12
snort ET TROJAN MSIL/Golroted.B Keylogger FTP rev 1 2015-02-12
snort ET POLICY I2P Seeds File Request rev 1 2015-02-12
snort ET TROJAN Predator Pain Keylogger FTP rev 1 2015-02-12
snort ET POLICY I2P Retrieving reseed info rev 2 2015-02-12
snort ET TROJAN Linux/Xnote Keep-Alive rev 1 2015-02-11
snort ET TROJAN Win32/Rovnix.J Checkin 2 rev 3 2015-02-11
snort ET WEB_CLIENT Possible Android RCE via XSS and Play Store XFO rev 1 2015-02-11
snort ET TROJAN Win32/Spy.KeyLogger.ODN Checkin rev 2 2015-02-11
snort ET TROJAN ELF/Mayhem Checkin rev 2 2015-02-10
snort ET POLICY SUSPICIOUS *.rar.exe in HTTP URL rev 1 2015-02-09
snort ET TROJAN Skeleton Key Filename in SMB2 Traffic rev 2 2015-02-07
snort ET TROJAN Skeleton Key Filename in SMB2 Traffic rev 4 2015-02-07
snort ET TROJAN DDoS.XOR Checkin rev 3 2015-02-07
snort ET TROJAN Skeleton Key Filename in SMB2 Traffic rev 5 2015-02-07
snort ET TROJAN Sakula/Mivast C2 Activity rev 1 2015-02-06
snort ET WEB_SPECIFIC_APPS FancyBox Remote Code Inclusion POST Request rev 2 2015-02-05
snort ET MOBILE_MALWARE IOS_XAGENT UA rev 1 2015-02-05
snort ET WEB_SERVER WPScan User Agent rev 2 2015-02-04
snort ET MOBILE_MALWARE Android/SMSThief.F Banker CnC Beacon rev 1 2015-02-03
snort ET MOBILE_MALWARE Android Syria-Twitter Checkin rev 1 2015-02-03
snort ET TROJAN ArcDoor Intial Checkin rev 1 2015-02-03
snort ET TROJAN W32/Asprox php.dll.crp POST CnC Beacon rev 4 2015-02-02
snort ET WEB_SPECIFIC_APPS Wordpress PingBack Possible GHOST attempt rev 4 2015-01-30
snort ET POLICY Onion2Web Tor Proxy Cookie rev 1 2015-01-28
snort ET TROJAN KL-Remote / Cryp_Banker14 RAT response rev 1 2015-01-27
snort ET TROJAN KL-Remote / Cryp_Banker14 RAT connection rev 1 2015-01-27
snort ET TROJAN W32/AGENT.NXNX Checkin 2 rev 2 2015-01-23