Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO DYNAMIC_DNS Query to a *.iamallama .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.from-nc .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.tantrum .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.damnserver .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.selfip .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.sellsyourhome .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.voltage .nz Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.lehoozeher .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.trumpetx .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.softwarefinesse .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.onapon .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.from-in .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.merseine .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.aeroantenna .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.dyndns-ip .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.franchisecandidates .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.xst .cl Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.minetest .land Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.nethub .fi Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.shitcunt .info Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.devicars .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.krnc .biz Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.monobasin .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.cuetara .name Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.us .to Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ppalma .cl Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.wolf-tec .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.netlord .de Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ditchyourip .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.saves-the-whales .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.jpleventos .cl Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.actsministries .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ps .ai Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.0000000000000000000000 .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.newpowergroup .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.aussievitamin .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ndra .biz Domain rev 2 2023-03-02
suricata ET ADWARE_PUP Win32/Presenoker Checkin rev 1 2023-03-02
suricata ET ATTACK_RESPONSE VBS/TrojanDownloader.Agent.YLH Payload Inbound rev 1 2023-03-02
sigma Suspicious Group And Account Reconnaissance Activity Using Net.EXE test 2023-03-02