Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Qihoo 360 DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Win32/TrojanDownloader.Agent.RFS Variant Checkin rev 2 2024-03-26
suricata ET INFO Artikel10 DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Bitcoin QR Code Generated via Btcfrog.com rev 5 2024-03-26
suricata ET MALWARE MalDoc/Gamaredon CnC Activity M2 rev 2 2024-03-26
suricata ET MALWARE Dridex CnC Request - Spam/Worm Component rev 2 2024-03-26
suricata ET MALWARE Observed BlackLotus SSL Certificate Observed rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Generic Stealer Config Download Request rev 2 2024-03-26
suricata ET INFO ffmuc DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-26 rev 2 2024-03-26
suricata ET MALWARE Konni Group CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Binance Credential Phish 2022-10-07 rev 2 2024-03-26
suricata ET MALWARE Konni Group CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Rewardsteal.e CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Axie Infinity Credential Phish M1 2022-05-18 rev 2 2024-03-26
suricata ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M1 rev 3 2024-03-26
suricata ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Hitian .me DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO dnsHome DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO GG Url Shortener Observed in DNS Query rev 5 2024-03-26
suricata ET INFO UncensoredDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE DCRat Related CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO CZ.NIC DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/SharkBot Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING AlaskaUSA FCU Phish 2022-07-24 rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-26 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Harly.AO CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE SManager Backdoor Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE TA402/Molerats Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Bebasid DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO jp.tiar DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING GCash Credential Phish 2022-06-17 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-06-01 rev 2 2024-03-26