Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN MS Remote Desktop micros User Login Request rev 3 2014-02-13
snort ET TROJAN Alman Dropper Checkin rev 4 2014-02-13
snort ET TROJAN Infostealer.Jackpos Checkin 2 rev 1 2014-02-13
snort ET TROJAN Win32/Tapazom.A 2 rev 1 2014-02-13
snort ET CURRENT_EVENTS SUSPICIOUS .CPL File Inside of Zip rev 2 2014-02-13
snort ET TROJAN Win32/Tapazom.A rev 1 2014-02-13
snort ET WEB_SERVER Recon-ng User-Agent rev 1 2014-02-12
snort ET TROJAN MS Remote Desktop edc User Login Request rev 1 2014-02-12
snort ET TROJAN Banking Trojan HTTP Cookie rev 1 2014-02-12
snort ET WEB_SERVER Apache Tomcat Boundary Overflow DOS/File Upload Attempt rev 1 2014-02-12
snort ET TROJAN Blackbeard Check-in rev 1 2014-02-12
snort ET TROJAN Possible Mask C2 Traffic rev 1 2014-02-11
snort ET WEB_SPECIFIC_APPS JoomSocial AvatarUpload RCE rev 8 2014-02-11
snort ET INFO Suspicious Jar name JavaUpdate.jar rev 2 2014-02-11
snort ET TROJAN W32/Asprox.ClickFraudBot CnC Beacon Acknowledgement rev 1 2014-02-10
snort ET TROJAN W32/Rshot.Backdoor File Upload CnC Beacon rev 1 2014-02-10
snort ET TROJAN W32/Asprox.ClickFraudBot CnC Beacon rev 1 2014-02-10
snort ET WEB_SERVER Possible XXE SYSTEM ENTITY in POST BODY. rev 1 2014-02-03
snort ET FTP Outbound Java Downloading jar over FTP rev 2 2014-02-03
snort ET TROJAN W32/Neverquest.InfoStealer Configuration Request CnC Beacon rev 1 2014-01-31
snort ET TROJAN SolarBot Plugin Download Server Response rev 4 2014-01-31
snort ET TROJAN Jadtree Downloader rar rev 1 2014-01-30
snort ET TROJAN SolarBot Plugin Download ComputerInfo rev 1 2014-01-30
snort ET WEB_CLIENT CookieBomb 2.0 In Server Response Jan 29 2014 rev 3 2014-01-30
snort ET TROJAN SolarBot Plugin Download MessageBox rev 1 2014-01-30
snort ET TROJAN SolarBot Plugin Download WalletSteal rev 1 2014-01-30
snort ET TROJAN W32/LockscreenBEI.Scareware Cnc Beacon rev 1 2014-01-28
snort ET TROJAN LDPinch SMTP Password Report rev 6 2014-01-28
snort ET TROJAN Win32/Xtrat C2 Response rev 2 2014-01-28
snort ET TROJAN Limitless Logger Sending Data over SMTP 2 rev 2 2014-01-28
snort ET MOBILE_MALWARE Android/HeHe.Spy GetTaskRequest CnC Beacon rev 2 2014-01-22
snort ET TROJAN Cybergate/Rebhip/Spyrat Backdoor Keepalive Response rev 6 2014-01-21
snort ET TROJAN ICEFOG JAVAFOG JAR checkin rev 3 2014-01-17
snort ET TROJAN PWS.Win32/Daceluw.A Checkin rev 2 2014-01-15
snort ET INFO Suspicious Possible Process Dump in POST body rev 3 2014-01-15
snort ET DOS Likely NTP DDoS In Progress MON_LIST Response to Non-Ephemeral Port IMPL 0x02 rev 3 2014-01-14
snort ET TROJAN Kishop.A checkin rev 1 2014-01-14
snort ET POLICY Bitcoin Mining Server Stratum Protocol HTTP Header rev 1 2014-01-12
snort ET WEB_SERVER ATTACKER WebShell - PHP Offender - POST Command rev 1 2014-01-11
snort ET WEB_SERVER ATTACKER WebShell - PHP Offender - Title rev 2 2014-01-11