Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Infostealer.Mysayad Checkin 1 rev 1 2014-08-04
snort ET TROJAN Infostealer.Mysayad Checkin 2 rev 1 2014-08-04
snort ET TROJAN DoS.Linux/Elknot.G Checkin rev 1 2014-07-30
snort ET SCAN Chroot-apache0day Unknown Web Scanner User Agent rev 3 2014-07-29
snort ET MOBILE_MALWARE Worm.AndroidOS.Selfmite.a Checkin rev 1 2014-07-28
snort ET TROJAN W32/Kbot.Backdoor Variant CnC Beacon rev 2 2014-07-25
snort ET SCAN Internet Scanning Project HTTP scan rev 1 2014-07-25
snort ET TROJAN Likely Malicious SSL Cert With Script Tags rev 1 2014-07-24
snort ET TROJAN Hupigon.DF Checkin rev 2 2014-07-24
snort ET TROJAN XPSecurityCenter FakeAV Checkin rev 3 2014-07-24
snort ET TROJAN Dridex/Bugat/Feodo Cookie rev 1 2014-07-24
snort ET SCAN Possible WordPress xmlrpc.php wp.getUsersBlogs Flowbit Set rev 2 2014-07-23
snort ET TROJAN Asterope Checkin rev 2 2014-07-22
snort ET CURRENT_EVENTS Possible Sweet Orange redirection 21 July 2014 rev 1 2014-07-22
snort ET WEB_SERVER Adobe Flash Player Rosetta Flash compressed CWS in URI rev 1 2014-07-18
snort ET TROJAN Soraya Credit Card Exfiltration rev 1 2014-07-16
snort ET TROJAN Upatre Common URI Struct July 15 2014 rev 2 2014-07-15
snort ET MOBILE_MALWARE Android Spyware Dowgin Checkin rev 1 2014-07-11
snort ET TROJAN Minirem rev 4 2014-07-11
snort ET TROJAN CyberGate RAT Checkin rev 1 2014-07-10
snort ET EXPLOIT Zollard PHP Exploit UA Outbound rev 3 2014-07-09
snort ET EXPLOIT Zollard PHP Exploit UA rev 4 2014-07-09
snort ET WEB_SPECIFIC_APPS Possible WP Plug-in MailPoet Arbitrary File Upload/Auth Bypass Vulnerability rev 2 2014-07-08
snort ET TROJAN Win32/Zemot Checkin rev 2 2014-07-07
snort ET TROJAN Infostealer.Bancos Checkin via SMTP rev 1 2014-07-07
snort ET TROJAN W32/Antifulai.APT CnC Beacon 1 rev 3 2014-07-03
snort ET TROJAN Trojan.Karagany C&C Response rev 1 2014-07-02
snort ET TROJAN Possible W32/VBKlip BAN Download rev 1 2014-07-01
snort ET TROJAN Win32/Sharik Checkin rev 1 2014-06-30
snort ET TROJAN Win32/Sharik C2 Incoming Traffic rev 1 2014-06-30
snort ET WEB_SERVER PHP Crawler rev 1 2014-06-26
snort ET WEB_SPECIFIC_APPS TimThumb Remote Command Execution rev 1 2014-06-26
snort ET WEB_SERVER c99 Shell Backdoor Var Override URI rev 1 2014-06-24
snort ET WEB_SERVER c99 Shell Backdoor Var Override Cookie rev 1 2014-06-24
snort ET TROJAN W32/Citadel Download From CnC Server /files/ attachment rev 6 2014-06-24
snort ET EXPLOIT Supermicro BMC Password Disclosure 2 rev 2 2014-06-20
snort ET EXPLOIT Supermicro BMC Password Disclosure 4 rev 2 2014-06-20
snort ET EXPLOIT Supermicro BMC Password Disclosure 1 rev 2 2014-06-20
snort ET MOBILE_MALWARE Andr/com.sdwiurse rev 3 2014-06-20
snort ET EXPLOIT Supermicro BMC Password Disclosure 3 rev 2 2014-06-20