Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32.FakeAV POST datan.php rev 2 2014-06-19
snort ET CURRENT_EVENTS Bleeding Life 2 GPLed Exploit Pack payload download rev 3 2014-06-19
snort ET MALWARE Optimum Installer User-Agent IE6 on Windows XP rev 4 2014-06-19
snort ET TROJAN W32/Goolbot.E Checkin UA Detected iamx rev 3 2014-06-19
snort ET CURRENT_EVENTS Bleeding Life 2 GPLed Exploit Pack exploit request rev 3 2014-06-19
snort ET TROJAN Sasfis Botnet Client Reporting Back to Controller After Command Execution rev 6 2014-06-17
snort ET TROJAN Hangover related campaign Checkin rev 1 2014-06-16
snort ET MOBILE_MALWARE Android/Netisend.A Posting Information to CnC rev 3 2014-06-12
snort ET TROJAN Putter Panda 3PARA RAT initial beacon rev 2 2014-06-11
snort ET TROJAN Pandemiya User-Agent rev 1 2014-06-10
snort ET WEB_SPECIFIC_APPS JCE Joomla Extension rev 2 2014-06-10
snort ET TROJAN EtumBot Registration Request rev 5 2014-06-09
snort ET TROJAN EtumBot Ping rev 2 2014-06-09
snort ET TROJAN PlugX/Destory HTTP traffic rev 1 2014-06-06
snort ET P2P zzima_loader rev 1 2014-06-05
snort ET TROJAN Win32.Crypt.nc Checkin rev 4 2014-06-04
snort ET MOBILE_MALWARE AndroidOS/Lotoor.Q rev 2 2014-06-04
snort ET TROJAN Soraya C2 User-Agent rev 1 2014-06-04
snort ET TROJAN W32/Zeus.BitcoinMiner Variant CnC Beacon rev 1 2014-05-28
snort ET CURRENT_EVENTS Metasploit Various Java Exploit Common Class name rev 5 2014-05-27
snort ET TROJAN Win32/Urausy.C response rev 2 2014-05-23
snort ET SCAN NMAP OS Detection Probe rev 3 2014-05-21
snort ET TROJAN Possible Zendran ELF IRCBot Joining Channel rev 2 2014-05-19
snort ET TROJAN W32/Hicrazyk.A Downloader Install CnC Beacon rev 4 2014-05-17
snort ET TROJAN W32/HelloBridge.Backdoor Login CnC Beacon rev 1 2014-05-14
snort ET CURRENT_EVENTS DRIVEBY FlashPack Plugin-Detect May 13 2014 rev 1 2014-05-14
snort ET TROJAN W32/HelloBridge.Backdoor Register CnC Beacon rev 1 2014-05-14
snort ET TROJAN PandoraRat/Refroso.bsp Activity rev 4 2014-05-13
snort ET TROJAN PandoraRat/Refroso.bsp Directory Listing Sent To Server rev 4 2014-05-13
snort ET TROJAN W32/Asprox Passgrub POST CnC Beacon rev 2 2014-05-06
snort ET TROJAN W32/Karagany.Downloader CnC Beacon rev 1 2014-05-05
snort ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption rev 1 2014-04-30
snort ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption 2 rev 1 2014-04-30
snort ET TROJAN Trojan.Win32.A.FakeAV Reporting rev 4 2014-04-29
snort ET TROJAN Backdoor.Win32.RShot Ping Outbound rev 3 2014-04-28
snort ET TROJAN W32/Eclipse.DDOSBot CnC Beacon Response rev 1 2014-04-28
snort ET TROJAN Win32/Cutwail.BE Checkin 2 rev 3 2014-04-28
snort ET CURRENT_EVENTS SUSPICIOUS Crystalize Filter in Uncompressed Flash rev 1 2014-04-28
snort ET TROJAN Vawtrak/NeverQuest - Post Data Form 01 rev 1 2014-04-28
snort ET TROJAN Win32/Cutwail.BE Checkin 1 rev 3 2014-04-28