Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE TrojanDownloader:Win32/Sinresby.B Checkin rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-05-24 rev 2 2024-03-26
suricata ET INFO LibreDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Generic Credential Phish Landing Page M2 2022-10-11 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Lars Lehmn DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Suspected APT28 Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE oRAT Related CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-26 rev 2 2024-03-26
suricata ET INFO DNS For Family DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Mullvad DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Hact .be Pentesting CnC Activity rev 2 2024-03-26
suricata ET MALWARE OSX/Proton.B Domain in SNI rev 6 2024-03-26
suricata ET MALWARE Win32/Trickbot Data Exfiltration M2 rev 3 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish rev 2 2024-03-26
suricata ET PHISHING AlaskaUSA FCU Phish 2022-07-24 rev 2 2024-03-26
suricata ET INFO Microsoft Connection Test rev 5 2024-03-26
suricata ET PHISHING Successful DHL Credential Phish M2 2022-06-09 rev 2 2024-03-26
suricata ET PHISHING Successful MetaMask Pass Phrase Phish 2022-12-27 rev 2 2024-03-26
suricata ET PHISHING Generic Credential Phish Landing Page 2022-12-07 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Harly.AO CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/Inido!rts Checkin rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/MagicRAT CnC Activity M1 rev 3 2024-03-26
suricata ET MALWARE Loki Locker Ransomware CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO ControlId DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Observed OpenDrive Cloud Storage SSL Cert rev 2 2024-03-26
suricata ET INFO Limo Telu DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET DNS APT_NGO_wuaclt C2 Domain micorsofts.com rev 4 2024-03-26
suricata ET INFO Njalla DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Public Array DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Bitter APT Payload Request rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE TransparentTribe CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Onedrive Credential Phish 2022-06-22 rev 2 2024-03-26
suricata ET MALWARE Successful CargoBay Exfil rev 2 2024-03-26
suricata ET MALWARE Octopus Backdoor Related Domain in DNS Lookup rev 2 2024-03-26