Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE WinPwn PenTesting Activity rev 2 2024-03-26
suricata ET INFO Brahma World DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO jp.tiar DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO NextDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Aaflalo .me DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Spy.Banker.BOF CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE MSIL/Bobik CnC Traffic rev 3 2024-03-26
suricata ET MALWARE DazzleSpy Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE lu0bot Loader HTTP Request M2 rev 3 2024-03-26
suricata ET INFO Public Array DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Ransom.AndroidOS.Agent.bi CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Go/PSW.Agent_AGen.A Data Exfil rev 2 2024-03-26
suricata ET ADWARE_PUP BoostBeast Checkin M1 rev 2 2024-03-26
suricata ET GAMES Moonlight Hack Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO DigitalSize DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Sidewinder APT Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO DnsCrypt DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE MalDoc/Gamaredon CnC Activity M3 rev 2 2024-03-26
suricata ET ADWARE_PUP Win/Malware.Filetour Variant Checkin M1 rev 3 2024-03-26
suricata ET MALWARE Konni Group CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Dridex CnC Request - Spam/Worm Component rev 2 2024-03-26
suricata ET MALWARE DCRat Related CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE MalDoc/Gamaredon CnC Activity M1 rev 2 2024-03-26
suricata ET MALWARE 000Stealer CnC Checkin rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP Win32/Adware.Neoreklami.MI Activity M2 rev 2 2024-03-26
suricata ET CURRENT_EVENTS Sliver Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE TrueBot/Silence.Downlaoder Screenshot Post M2 rev 2 2024-03-26
suricata ET INFO Bortzmeyer DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Origami.b / Donot DNS Lookup rev 2 2024-03-26
suricata ET USER_AGENTS Microsoft Office Existence Discovery User-Agent rev 2 2024-03-26
suricata ET MALWARE TA402/Molerats Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Gamaredon CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE DazzleSpy Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO CZ.NIC DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup rev 2 2024-03-26