Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .ltlegl .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .w6rob .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .n-e-t .it Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.7s .com .tr Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.melaniebest .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .hauganslekt .no Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .uggbootsale .net Domain rev 1 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ivc .org .ar Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .flexiblegeeks .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .w6rob .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .bal-tazaar .be Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rasenftinc .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .benabood .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .jokertv .eu Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.utdnews .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.legonas .net Domain rev 2 2024-09-16
suricata ET RETIRED ISMAgent Receiving Commands from CnC Server rev 6 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *. .lasboleras .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .vanomania .net Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .afaa .it Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .ridespirals .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.sabaenergy .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .jansolo .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.cnew .ir Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.pchelp-24 .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ninehells .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .lscomm .net Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.michiganbowling .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .flexiblegeeks .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ittqc .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.famsenden .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.utdnews .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .i-taiwan .tv Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .caminolafusta .cl Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .afaa .it Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .i-taiwan .tv Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .lasboleras .com .ar Domain rev 2 2024-09-16
snort ET TROJAN Possible DarkFinger Payload Retrieval Attempt - ps10 rev 2 2024-09-13
snort ET TROJAN Possible DarkFinger tasklist Retrieval attempt rev 2 2024-09-13
snort ET WEB_SERVER Possible SQL Injection SELECT CAST in HTTP URI rev 3 2024-09-13