Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
splunk Linux Auditd Possible Setuid Execve Privesc production 2026-07-06
splunk AWS Bedrock Claude Possible Prompt Injection production 2026-07-06
splunk AWS Bedrock Claude Hostile Prompt Sentiment production 2026-07-06
splunk AWS Bedrock Claude Cross Region Possible Inference Abuse production 2026-07-06
splunk AWS Bedrock Claude Sensitive Data in Prompts production 2026-07-06
splunk Linux Dirty Frag Kernel Privilege Escalation production 2026-07-06
splunk Linux Pedit Offset Out Of Bounds production 2026-07-06
splunk AWS Bedrock Claude High Risk Filesystem and Exec Tool Invocation production 2026-07-06
splunk AWS Bedrock Claude excessive use of tokens production 2026-07-06
snort ET INFO DYNAMIC_DNS Query to a *.saptagunautama .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.saptagunautama .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.everich-airfreight .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.cakk .us domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.rolotec .ro domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.danleevogler .net domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.europeserv .org domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.portek .net .au domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.richardwaddingham .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.atcfirealarms .co .uk domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.tuplantaforma .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.441creative .co .uk domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.cobraproject .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.bucknine .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.bucknine .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.cobraproject .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.richardwaddingham .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.everich-airfreight .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.atcfirealarms .co .uk domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.propertyshots .net domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.rolotec .ro domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.mwheller .co .uk domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.portek .net .au domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.propertyshots .net domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.bigjaco .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.cakk .us domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.tuplantaforma .com domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.brittainlawfirm .net domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.danleevogler .net domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.europeserv .org domain rev 1 2026-07-05
snort ET INFO DYNAMIC_DNS Query to a *.441creative .co .uk domain rev 1 2026-07-05