Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN ZeroAccess/Max++ Rootkit C&C Activity 1 rev 1 2011-09-22
snort GPL NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt rev 7 2011-09-22
snort ET TROJAN Shylock Module Server Response rev 1 2011-09-22
snort GPL NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt rev 21 2011-09-22
snort GPL NETBIOS SMB IPC$ share access rev 17 2011-09-21
snort GPL NETBIOS SMB ADMIN$ share access rev 14 2011-09-21
snort GPL NETBIOS SMB D$ share access rev 13 2011-09-21
snort GPL NETBIOS SMB C$ share access rev 17 2011-09-21
snort GPL NETBIOS SMB IPC$ unicode share access rev 17 2011-09-21
snort GPL NETBIOS DOS RFPoison rev 8 2011-09-21
snort GPL NETBIOS SMB CD.. rev 7 2011-09-21
snort GPL CHAT ICQ access rev 12 2011-09-21
snort GPL NETBIOS NT NULL session rev 11 2011-09-21
snort GPL NETBIOS SMB CD... rev 7 2011-09-21
snort GPL NETBIOS SMB llsrconnect unicode overflow attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS msqueue bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS nddeapi bind attempt rev 6 2011-09-20
snort GPL NETBIOS SMB IActivation unicode bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS winreg bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB nddeapi bind attempt rev 6 2011-09-20
snort GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS IActivation little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS C$ share access rev 12 2011-09-20
snort GPL NETBIOS SMB llsrconnect overflow attempt rev 5 2011-09-20
snort GPL NETBIOS SMB winreg unicode little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB D$ unicode share access rev 9 2011-09-20
snort GPL NETBIOS SMB winreg bind attempt rev 6 2011-09-20
snort GPL NETBIOS SMB-DS msqueue little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB msqueue unicode little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS OpenKey overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB CoGetInstanceFromFile little endian attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS IActivation bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB IActivation unicode little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS llsrpc unicode little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS llsrconnect overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB msqueue little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS RemoteActivation unicode little endian attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS llsrconnect unicode little endian overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS ISystemActivator bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS D$ unicode share access rev 9 2011-09-20