Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY DNS Query to DynDNS Domain *.homesecuritymac .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.ddns .me rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.webhop .me rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mysecuritycamera .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.brasilia .me rev 2 2019-10-14
snort ET TROJAN NSO Group Pegasus CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.onthewifi .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.collegefan .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.bounceme .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.eating-organic .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.stufftoread .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.hopto .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.fantasyleague .cc rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.serveftp .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.ilovecollege .info rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.myftp .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.blogsyte .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servehumour .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servequake .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.myactivedirectory .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mmafan .biz rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.ufcfan .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mysecuritycamera .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mysecuritycamera .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.dnsiskinky .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.privatizehealthinsurance .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.serveexchange .com rev 2 2019-10-14
snort ET TROJAN NSO Group Pegasus CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servecounterstrike .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.geekgalaxy .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.quicksytes .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.dynns .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.ddnsking .com rev 2 2019-10-12
snort ET POLICY DNS Query to DynDNS Domain *.ddns .net rev 2 2019-10-12
snort ET POLICY DNS Query to DynDNS Domain *.3utilities .com rev 2 2019-10-12
snort ET TROJAN Unknown Trojan with Fake Java User-Agent rev 3 2019-10-11
snort ET TROJAN CASHY200 CnC Domain in DNS Lookup rev 2 2019-10-10
snort ET TROJAN Java Archive sent when remote host claims to send an image rev 2 2019-10-10
snort ET TROJAN CASHY200 CnC Domain in DNS Lookup rev 2 2019-10-10
snort ET TROJAN CASHY200 CnC Domain in DNS Lookup rev 2 2019-10-10