Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN US-CERT TA14-353A Proxy Tool 1 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 1 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 6 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 2 rev 1 2014-12-23
snort ET TROJAN Win32/Spy.Agent.OHT - AnunakAPT TCP Keep-Alive rev 2 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 9 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Listening Implant 6 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Listening Implant 7 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 5 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Wiper 2 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 4 rev 1 2014-12-23
snort ET TROJAN Trojan.Nurjax Checkin rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 8 rev 1 2014-12-23
snort ET SCAN Acunetix Accept HTTP Header detected scan in progress rev 1 2014-12-18
snort ET TROJAN Win32/Spy.Banker.AAXV Retrieving key from Pinterest rev 2 2014-12-18
snort ET TROJAN Linux/Ssemgrvd sshd Backdoor HTTP CNC 2 rev 4 2014-12-18
snort ET CURRENT_EVENTS Evil Flash Redirector to RIG EK Dec 17 2014 rev 1 2014-12-18
snort ET TROJAN Win32/Poweliks.A Checkin 2 rev 1 2014-12-18
snort ET TROJAN ZhCAT.HackTool Operation Cleaver HTTP CnC Beacon rev 3 2014-12-17
snort ET MOBILE_MALWARE CoolReaper CnC Beacon 2 rev 1 2014-12-17
snort ET MOBILE_MALWARE CoolReaper User-Agent rev 1 2014-12-17
snort ET TROJAN Trojan.Agent.AIXD Checkin rev 2 2014-12-16
snort ET WEB_SERVER MorXploit Shell Command rev 1 2014-12-16
snort ET TROJAN W32/TRCrypt.ULPM Downloader CnC Beacon rev 1 2014-12-16
snort ET TROJAN Infostealer.Bancos Sending Stolen info SMTP rev 1 2014-12-15
snort ET TROJAN HawkEye Keylogger Report SMTP rev 1 2014-12-13
snort ET TROJAN Trojan/Win32.Espy Report via SMTP rev 1 2014-12-13
snort ET TROJAN Probable Keylogger Report SMTP rev 2 2014-12-13
snort ET TROJAN Trojan.SpamBanker Report via SMTP rev 1 2014-12-13
snort ET EXPLOIT Possible GoldenPac Priv Esc in-use rev 2 2014-12-12
snort ET TROJAN W32/Fin4.InfoStealer Uploading User Credentials CnC Beacon rev 3 2014-12-11
snort ET POLICY HTTP Request to WebDAV CloudMe Service rev 2 2014-12-11
snort ET TROJAN Cloud Atlas CnC Beacon rev 1 2014-12-11
snort ET TROJAN VirRansom/VirLock Checkin rev 1 2014-12-10
snort ET TROJAN VirRansom/VirLock Checkin Response rev 1 2014-12-10
snort ET TROJAN Backdoor.Linux.Turla Download rev 2 2014-12-09
snort ET WEB_SERVER Insomnia Shell HTTP Request rev 1 2014-12-09
snort ET WEB_SERVER Insomnia Shell Outbound CMD Banner rev 1 2014-12-09
snort ET POLICY Splashtop Remote Control Session Keepalive Response rev 2 2014-12-05
snort ET TROJAN W32/SCKeyLog.InfoStealer Installation Confirmation Via SMTP rev 2 2014-12-05