Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO MegaNerd DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET INFO LibreDNS DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-20 rev 1 2022-10-20
snort ET INFO Limo Telu DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET INFO Paesa DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-20 rev 1 2022-10-20
snort ET INFO Mullvad DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET INFO NextDNS DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET INFO Mullvad DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET INFO Open Internet DNS Over HTTPS Certificate Inbound rev 1 2022-10-20
snort ET TROJAN W32/Nymaim Checkin M2 rev 8 2022-10-20
suricata ET PHISHING Successful Generic Credential Phish 2022-10-20 rev 1 2022-10-20
suricata ET PHISHING Successful Generic Credential Phish 2022-10-20 rev 1 2022-10-20
suricata ET PHISHING Generic Credential Phish Landing Page 2022-10-20 rev 1 2022-10-20
suricata ET PHISHING Successful Luno Credential Phish 2022-10-20 rev 1 2022-10-20
sigma Always Install Elevated MSI Spawned Cmd And Powershell test 2022-10-20
snort ET INFO dnsHome DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO FutaDNS DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO e-utp DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO jp.tiar DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO Internet Initiative Japan DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO Infotek DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO Hitian .me DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO DNSlify DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET CURRENT_EVENTS Successful mail .ru Credential Phish rev 1 2022-10-19
snort ET USER_AGENTS Observed Uclient User-Agent rev 1 2022-10-19
snort ET INFO IQDNS DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO jp.tiar DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO DNS For Family DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO ffmuc DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO Lars Lehmn DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO Edgy DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO Ibksturm DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
snort ET INFO La Contre-Voie DNS Over HTTPS Certificate Inbound rev 1 2022-10-19
suricata ET USER_AGENTS Observed Uclient User-Agent rev 1 2022-10-19
suricata ET PHISHING Successful mail .ru Credential Phish rev 1 2022-10-19
snort ET INFO DNSPod DNS Over HTTPS Certificate Inbound rev 1 2022-10-18
snort ET INFO AhaDNS DNS Over HTTPS Certificate Inbound rev 1 2022-10-18