Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO Observed TelegramNotify User-Agent Outbound rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.digitalforest .my domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.viar3d .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS HTTP Request to a *.knr .cl domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.shitstudent .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.knr .cl domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.mjfuentes .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS HTTP Request to a *.mjfuentes .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS HTTP Request to a *.shitstudent .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS HTTP Request to a *.viar3d .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS HTTP Request to a *.rigaprecast .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS HTTP Request to a *.douchisushi .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS HTTP Request to a *.digitalforest .my domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.fassen-shoes .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.rigaprecast .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.wspaperbag .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.wspaperbag .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.cristianvaldes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.digitalforest .my domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mjfuentes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mindboggle .us domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.rigaprecast .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.wspaperbag .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.shitstudent .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rigaprecast .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.knr .cl domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.mjfuentes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.cristianvaldes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.shitstudent .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.viar3d .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.viar3d .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.digitalforest .my domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.douchisushi .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.mindboggle .us domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.fassen-shoes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.douchisushi .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.knr .cl domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.fassen-shoes .com domain rev 1 2025-09-11
suricata ET INFO Observed TelegramNotify User-Agent Outbound rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.xeonxu .info domain rev 1 2025-09-10