Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN RDP Brute Force Bot Checkin rev 2 2014-03-12
snort ET TROJAN W32/PointOfSales.Misc CnC Beacon rev 1 2014-03-11
snort ET TROJAN Citadel Activity POST rev 4 2014-03-11
snort ET TROJAN W32/PointOfSales.Misc CnC Activity rev 1 2014-03-11
snort ET TROJAN Darkshell.A Checkin XOR C0 Win XP rev 2 2014-03-06
snort ET TROJAN SMSHoax Riskware checkin rev 1 2014-03-06
snort ET POLICY W32/Installiq.Adware Install Information Beacon rev 2 2014-03-06
snort ET INFO HTTP Connection To DDNS Domain Hopto.org rev 1 2014-03-05
snort ET INFO HTTP Connection To DDNS Domain Zapto.org rev 1 2014-03-05
snort ET INFO HTTP Connection To DDNS Domain Redirectme.net rev 1 2014-03-05
snort ET INFO HTTP Connection To DDNS Domain serveblog.net rev 1 2014-03-05
snort ET INFO HTTP Connection To DDNS Domain myftp.com rev 1 2014-03-05
snort ET CURRENT_EVENTS SWF filename used in IE 2014-0322 Watering Hole Attacks rev 2 2014-03-05
snort ET POLICY InstallIQ Updater Software request rev 3 2014-03-05
snort ET INFO HTTP Connection To DDNS Domain Adultdns.net rev 1 2014-03-05
snort ET INFO HTTP Connection To DDNS Domain Myvnc.com rev 1 2014-03-05
snort ET TROJAN W32/Qakbot.Bot Version 8 CnC Beacon rev 2 2014-03-04
snort ET TROJAN Downloader.Win32.Geral Checkin rev 2 2014-03-04
snort ET WEB_CLIENT Blatantly Evil JS Function rev 2 2014-02-28
snort ET TROJAN Trojan.Delf-5496 New Infection Report rev 5 2014-02-27
snort ET CURRENT_EVENTS SUSPICIOUS .PIF File Inside of Zip rev 5 2014-02-27
snort ET CURRENT_EVENTS SUSPICIOUS .exe Downloaded from SVN/HTTP on GoogleCode rev 1 2014-02-27
snort ET CURRENT_EVENTS SUSPICIOUS XXTEA UTF-16 Encoded HTTP Response rev 2 2014-02-26
snort ET WEB_SPECIFIC_APPS Symantec Endpoint Manager XXE RCE Attempt rev 3 2014-02-26
snort ET WEB_CLIENT SUSPICIOUS Java Lang Runtime in Response rev 1 2014-02-25
snort ET TROJAN Gh0st Trojan CnC 3 rev 2 2014-02-24
snort ET POLICY Application Crash Report Sent to Microsoft rev 1 2014-02-24
snort ET TROJAN Trojan.MyDNS DNSChanger - HTTP POST rev 8 2014-02-19
snort ET EXPLOIT Linksys Auth Bypass share_editor.cgi rev 2 2014-02-19
snort ET EXPLOIT Linksys Auth Bypass switch_boot.cgi rev 2 2014-02-19
snort ET EXPLOIT Linksys Auth Bypass override.cgi rev 1 2014-02-19
snort ET EXPLOIT Linksys Auth Bypass fw_sys_up.cgi rev 2 2014-02-19
snort ET WEB_CLIENT EMET Detection Via XMLDOM rev 2 2014-02-18
snort ET TROJAN W32/Dadobra.Downloader/DNSChanger Dnsmake CnC Beacon rev 1 2014-02-18
snort ET TROJAN MSIL.Zapchast Checkin rev 1 2014-02-15
snort ET TROJAN Android/FakeKakao checkin rev 2 2014-02-14
snort ET TROJAN W32/Asprox.ClickFraudBot POST CnC Beacon rev 2 2014-02-14
snort ET MOBILE_MALWARE Android/FakeKakao checkin 2 rev 1 2014-02-14
snort ET MOBILE_MALWARE Android/FakeKakao checkin 1 rev 1 2014-02-14
snort ET MOBILE_MALWARE Android/FakeKakao checkin 3 rev 1 2014-02-14