Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Manjusaka C2 Heartbeat Response rev 2 2024-03-26
suricata ET PHISHING Axie Infinity Credential Phish Landing Page M3 2022-05-18 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Origami.b / Donot DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Sidewinder APT Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/Trickbot Data Exfiltration M3 rev 3 2024-03-26
suricata ET CURRENT_EVENTS Sliver Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/MagicRAT CnC Activity M2 rev 2 2024-03-26
suricata ET MALWARE UAC-0114/Winter Vivern Screenshot Upload M1 rev 2 2024-03-26
suricata ET MALWARE Unknown APT Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Spy.Vultur.A CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Rezhajul DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Njalla DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE AHK Bot Domain Profiler CnC Activity rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Guerrilla.h CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Spy.SmsSpy.XC CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Facebook Phish 2022-07-18 rev 2 2024-03-26
suricata ET MALWARE Sidewinder APT Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.GoatRat CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-03-18 rev 3 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-06-01 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Andrews & Arnold DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Limo Telu DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Bebasid DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Mullvad DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO ControlId DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Cobalt Strike Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO bridges.torproject.org over TLS with SNI rev 4 2024-03-26
suricata ET MALWARE DCRat Initial Checkin Server Response M6 rev 3 2024-03-26
suricata ET INFO DNSlify DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Observed OpenDrive Cloud Storage SSL Cert rev 2 2024-03-26
suricata ET PHISHING Successful Manhattan College Credential Phish 2022-01-10 rev 2 2024-03-26
suricata ET MALWARE DarkCloud Stealer Key Logger Function Exfiltrating Data via Telegram rev 2 2024-03-26
suricata ET INFO jp.tiar DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Win32/MagicRAT CnC Activity M1 rev 3 2024-03-26
suricata ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound rev 2 2024-03-26