Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32.Small.AB or related Post-infection checkin rev 3 2010-10-05
snort ET TROJAN Virtumod/Agent.ufv/Virtumonde Get Request rev 4 2010-10-05
snort ET POLICY Smilebox Spyware Download rev 9 2010-10-05
snort ET TROJAN Zhelatin npopup Update Detected rev 4 2010-10-05
snort ET TROJAN Theoreon.com Related Trojan Checkin rev 3 2010-10-05
snort ET CHAT General MSN Chat Activity rev 3 2010-10-05
snort ET TROJAN Zbot/Beomok/PSW - HTTP POST rev 4 2010-10-05
snort ET CHAT Gadu-Gadu IM Login Server Request rev 6 2010-10-05
snort ET POLICY Dell MyWay Remote control agent rev 4 2010-10-05
snort ET TROJAN xpsecuritycenter.com Fake AntiVirus GET-Install Checkin rev 4 2010-10-05
snort ET TROJAN Virusremover2008.com Checkin rev 5 2010-10-05
snort ET TROJAN Zbot/Zeus or Related Infection Checkin rev 7 2010-10-05
snort ET POLICY iTunes User Agent rev 6 2010-10-05
snort ET TROJAN Win32.Virut - GET rev 5 2010-10-05
snort ET POLICY CBS Streaming Video rev 6 2010-10-05
snort ET TROJAN WindowsEnterpriseSuite FakeAV get_product_domains.php rev 4 2010-10-05
snort ET TROJAN Shiz/Rohimafo Checkin rev 3 2010-10-05
snort ET TROJAN Win32 Cloaker Related Post Infection Checkin rev 4 2010-10-05
snort ET TROJAN TDSServ or Tidserv variant Checkin rev 4 2010-10-05
snort ET TROJAN Obitel Downloader Request rev 4 2010-10-04
snort ET P2P Tor Get Server Request rev 5 2010-10-04
snort ET POLICY Possible ProxyShell Hide IP Installation file download rev 3 2010-10-04
snort ET POLICY Orkut.com Social Site Access rev 4 2010-10-04
snort ET TROJAN PlayMP3z.biz Related Spyware/Trojan Install Report rev 3 2010-10-04
snort ET POLICY Possible ProxyShell Anonymous Access Connection rev 3 2010-10-04
snort ET SCAN Tomcat upload from external source rev 5 2010-10-04
snort ET POLICY Possible Web Crawl using Wget rev 6 2010-10-04
snort ET TROJAN Pushdo Update URL Detected rev 9 2010-10-04
snort ET TROJAN ProxyBot Phone Home Traffic rev 4 2010-10-04
snort ET SCAN Grim's Ping ftp scanning tool rev 6 2010-10-04
snort ET TROJAN Win32/FakeXPA Checkin URL rev 5 2010-10-04
snort ET TROJAN Knockbot Proxy Checkin rev 3 2010-10-04
snort ET POLICY python.urllib User Agent Web Crawl rev 8 2010-10-04
snort ET POLICY Myspace Login Attempt rev 6 2010-10-04
snort ET TROJAN Banito/Agent.pb Pass Stealer Email Report Outbound rev 3 2010-10-04
snort ET TROJAN Shark Pass Stealer Email Report rev 3 2010-10-04
snort ET POLICY External Unencrypted Connection to Ossec WUI rev 3 2010-10-04
snort ET WEB_SPECIFIC_APPS WSPortal SQL Injection Attempt -- content.php page INSERT rev 6 2010-10-03
snort ET TROJAN Win32.Lager Trojan Reporting rev 4 2010-10-03
snort ET TROJAN SpamTool.Win32.Agent.gy/Grum/Tedroo Or Similar HTTP Checkin rev 4 2010-10-03