Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
suricata ET WEB_SERVER Predator the Thief Password Prompt Accessed on Internal Compromised Server rev 2 2020-07-03
suricata ET WEB_CLIENT Predator the Thief Password Prompt Accessed on External Compromised Server rev 2 2020-07-03
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
snort ET TROJAN Lucifer CnC Checkin rev 1 2020-07-02
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
suricata ET MALWARE Lucifer CnC Checkin rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Suspected Glupteba Download rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Glupteba CnC Checkin rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Suspected Glupteba Download rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01