Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Ryan Palmer DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful DarkX Credential Phish 2022-12-19 rev 2 2024-03-26
suricata ET MALWARE Manjusaka C2 Heartbeat Response rev 2 2024-03-26
suricata ET INFO MegaNerd DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Win32/Packed.BlackMoon.A Variant Checkin rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android.Backdoor.866.origin CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Axie Infinity Credential Phish Landing Page M3 2022-05-18 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Ransom.AndroidOS.Agent.bi CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Spy.Vultur.A CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP Win32/Adware.Neoreklami.MI Activity M2 rev 2 2024-03-26
suricata ET MALWARE Win32/Trickbot Data Exfiltration M3 rev 3 2024-03-26
suricata ET PHISHING Successful Idaho Central CU Phish 2022-07-24 rev 2 2024-03-26
suricata ET INFO GameHouse License Check rev 2 2024-03-26
suricata ET MALWARE lu0bot Loader HTTP Request M2 rev 3 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Rewardsteal.e CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Spy.Agent.AKS CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Prometei Botnet CnC DGA - xinchao Pattern rev 2 2024-03-26
suricata ET INFO localhost .run TLS Certification Observed rev 2 2024-03-26
suricata ET INFO Switch DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-26 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Observed BlackLotus SSL Certificate Observed rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE TransparentTribe CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Emirates NBD Bank Credential Phish 2022-06-23 rev 2 2024-03-26
suricata ET MALWARE oRAT Related CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/Trickbot Data Exfiltration M4 rev 3 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Edgy DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE slock Ransomware CnC Activity rev 2 2024-03-26
suricata ET INFO Blokada DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO DnsCrypt DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE MSIL/Bobik CnC Traffic rev 3 2024-03-26
suricata ET INFO DNSlow DNS Over HTTPS Certificate Inbound rev 3 2024-03-26
suricata ET PHISHING Successful Binance Credential Phish 2022-10-07 rev 2 2024-03-26
suricata ET MALWARE Magecart Loader Javascript rev 2 2024-03-26
suricata ET INFO Safe Surfer DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26