Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Agent.aam CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-12-06 rev 2 2024-03-26
suricata ET MALWARE DazzleSpy Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE EvilNominatus Ransomware Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Backdoor.AndroidOS.Xhunter.a CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO localhost .run TLS Certification Observed rev 2 2024-03-26
suricata ET PHISHING Successful DHL Credential Phish M1 2022-06-09 rev 2 2024-03-26
suricata ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING TMOBILE Successful Credential Phish 2022-11-01 rev 2 2024-03-26
suricata ET INFO WeDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE MSIL/Bobik CnC Traffic rev 3 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Prometei Botnet CnC DGA - xinchao Pattern rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/TrojanDownloader.Agent.GEM CnC Checkin rev 3 2024-03-26
suricata ET MALWARE Win32/SilentBreak Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Ibksturm DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-12 rev 2 2024-03-26
suricata ET PHISHING Successful IRS Credential Phish 2022-04-25 rev 3 2024-03-26
suricata ET INFO Edgy DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Qihoo 360 DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Safe Surfer DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Hitian .me DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Usable Privacy DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING AlaskaUSA FCU Phish 2022-07-24 rev 2 2024-03-26
suricata ET INFO Keweon Center DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-09-14 rev 2 2024-03-26
suricata ET MALWARE OSX/Proton.B Domain in SNI rev 6 2024-03-26
suricata ET MALWARE Hact .be Pentesting CnC Activity rev 2 2024-03-26
suricata ET INFO MyDNS .network DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26