Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN NSO Group Pegasus CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.dvrcam .info rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.read-books .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.health-carereform .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.workisboring .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.nhlfan .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.couchpotatofries .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.damnserver .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mysecuritycamera .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.brasilia .me rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.ddns .me rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.serveblog .net rev 2 2019-10-14
snort ET TROJAN APT Mustang Panda Payload - CnC Checkin rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.hosthampster .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.freedynamicdns .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.webhop .me rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servepics .com rev 2 2019-10-14
snort ET TROJAN NSO Group Pegasus CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.bounceme .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.homesecuritypc .com rev 2 2019-10-14
snort ET TROJAN NSO Group Pegasus CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.blogsyte .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servehumour .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.myeffect .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.ilovecollege .info rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.fantasyleague .cc rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.freedynamicdns .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.serveexchange .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.pgafan .net rev 2 2019-10-14
snort ET TROJAN NSO Group Pegasus CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.unusualperson .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mmafan .biz rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.privatizehealthinsurance .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.geekgalaxy .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.onthewifi .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servehttp .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.collegefan .org rev 2 2019-10-14
snort ET TROJAN JEUSD CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mypsx .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servep2p .com rev 2 2019-10-14