Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 7 rev 4 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 32 rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 11 rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 13 rev 4 2020-09-16
suricata ET MALWARE APT33/CharmingKitten DDNS Overlap Domain in DNS Lookup M1 rev 5 2020-09-16
suricata ET MALWARE Chafer CnC DNS Query rev 3 2020-09-16
suricata ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup rev 4 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 4 rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 3 rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 26 rev 3 2020-09-16
suricata ET MALWARE W32.Razy Inject Domain in DNS Lookup rev 4 2020-09-16
suricata ET MALWARE APT33/CharmingKitten DDNS Overlap Domain in DNS Lookup M2 rev 5 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 14 rev 4 2020-09-16
suricata ET MALWARE Win32/Bisonal DNS Lookup 1 rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 2 rev 3 2020-09-16
suricata ET HUNTING Suspicious Malformed Double Accept Header rev 18 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 7 rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 5 rev 4 2020-09-16
suricata ET MALWARE DonotGroup/Patchwork CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET WEB_SPECIFIC_APPS Online Trade - Information Disclosure rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 40 rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 19 rev 4 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 16 rev 4 2020-09-16
suricata ET MALWARE DNS Query for DNSpionage CnC Domain rev 5 2020-09-16
suricata ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 24 rev 4 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 15 rev 4 2020-09-16
suricata ET MALWARE TEMP.Periscope APT Domain in DNS Lookup rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 14 rev 3 2020-09-16
suricata ET MALWARE Win32/Bisonal DNS Lookup 3 rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 19 rev 3 2020-09-16
suricata ET PHISHING Successful Generic Phish to zap-webspace.com Webhost 2018-10-25 rev 3 2020-09-16
suricata ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 1 rev 4 2020-09-16
suricata ET MALWARE Observed DNS Query to known Windshift APT Related Domain 2 rev 3 2020-09-16