Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO DYNAMIC_DNS HTTP Request to a *.servehttp .com Domain rev 6 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .hauganslekt .no Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.melaniebest .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.sabaenergy .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .w6rob .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .arybarbosa .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .gingertom .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .allaround .hk Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ninehells .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.7s .com .tr Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .arybarbosa .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .20pack .com Domain rev 1 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .uggbootsale .net Domain rev 1 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .mrdev .com .ar Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ittelecom .pl Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.doorsnknobs .net Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .bamapos .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.michiganbowling .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .avtosnoj .si Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .hosts .name Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .i-taiwan .tv Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.famsenden .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.legonas .net Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .hauganslekt .no Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.fullsense .com .br Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .itzzm .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.doorsnknobs .net Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .bal-tazaar .be Domain rev 3 2024-09-16
snort ET RETIRED ISMAgent Receiving Commands from CnC Server rev 4 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .backriverphotography .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .ltlegl .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.utdnews .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .gingertom .com Domain rev 2 2024-09-16
snort ET RETIRED ISMAgent CnC Checkin 1 rev 4 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .uggbootsale .net Domain rev 1 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .lscomm .net Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .ridespirals .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.michiganbowling .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.ninehells .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.hopto .org Domain rev 6 2024-09-16