Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M3 rev 1 2024-03-28
snort ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M2 rev 1 2024-03-28
snort ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 rev 1 2024-03-28
snort ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M2 rev 1 2024-03-28
suricata ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M2 rev 1 2024-03-28
suricata ET MALWARE Win32/Stealc Active C2 Responding with browsers Config M2 rev 1 2024-03-28
suricata ET MALWARE Win32/Stealc Active C2 Responding with browsers Config M3 rev 1 2024-03-28
suricata ET MALWARE Win32/Stealc Active C2 Responding with browsers Config M1 rev 1 2024-03-28
suricata ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M3 rev 1 2024-03-28
suricata ET MALWARE Large DNS Query possible covert channel rev 10 2024-03-28
suricata ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 rev 1 2024-03-28
suricata ET MALWARE MACE C2 Framework Response M1 rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET HUNTING Suspicious Empty SSL Certificate - Observed in Cobalt Strike rev 7 2024-03-27
suricata ET MALWARE TrollAgent Checkin rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE Observed CobaltStrike CnC Domain in TLS SNI rev 3 2024-03-27
suricata ET MALWARE Upatre Binary Download Jan 02 2014 rev 7 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET HUNTING Possible Successful Generic Phish to webwave .dev Domain 2023-05-24 rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE Observed CobaltStrike CnC Domain in TLS SNI rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE MacOS/Adload CnC Beacon rev 3 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET INFO Netflix Streaming Player Access rev 5 2024-03-27