Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.tcm-studios .info domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dewarp .me domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.data-line .gr domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.bewusstairleben .ch domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.pralad .com .np domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.boringart .lt domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.drciocan .ro domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ruhezeiter .ch domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.solucionip .com .ar domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.flowtemp .ro domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.acharyabijay .com .np domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.c-om .org domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bishallimbu .com .np domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ultraexpress .com .ar domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.catcher .ru domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.acharyabijay .com .np domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.gsxpress .com .my domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.auszeitseminar .ch domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.dewarp .me domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.pralad .com .np domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.c-om .org domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.tcm-studios .info domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ultraexpress .com .ar domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.drciocan .ro domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.data-line .gr domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.catcher .ru domain rev 1 2025-09-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.allen-software .com domain rev 1 2025-09-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.bridgetech .ec domain rev 1 2025-09-13
snort ET INFO DYNAMIC_DNS Query to a *.allen-software .com domain rev 1 2025-09-13
snort ET INFO DYNAMIC_DNS Query to a *.bridgetech .ec domain rev 1 2025-09-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.bridgetech .ec domain rev 1 2025-09-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bridgetech .ec domain rev 1 2025-09-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.allen-software .com domain rev 1 2025-09-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.allen-software .com domain rev 1 2025-09-13
snort ET TROJAN Oyster Backdoor CnC Checkin M2 rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.enenet .co .uk domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.qs0 .de domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.lyxcorp .com domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.u-resort .com domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.art-motel .com domain rev 1 2025-09-12