Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
elastic AWS RDS Snapshot Export deprecated 2021-08-02
snort ET TROJAN TA421/YTTRIUM/APT29 TLS Certificate M2 rev 2 2021-07-31
snort ET TROJAN TA421/YTTRIUM/APT29 TLS Certificate M3 rev 1 2021-07-31
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
snort ET TROJAN Lemon_Duck CnC Domain in DNS Lookup rev 2 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
suricata ET MALWARE Lemon_Duck CnC Domain in DNS Lookup rev 1 2021-07-29
snort ET TROJAN MSIL/Heracles Variant CnC Activity rev 1 2021-07-28
snort ET EXPLOIT Apache Ambari Default Credentials Attempt rev 1 2021-07-28
snort ET EXPLOIT GraphQL Introspection Query Attempt rev 1 2021-07-28
snort ET EXPLOIT Monitorr 1.7.6m RCE Exploit Attempt rev 1 2021-07-28
snort ET MALWARE Socelars Related Domain in DNS Lookup rev 1 2021-07-28
suricata ET EXPLOIT Monitorr 1.7.6m RCE Exploit Attempt rev 1 2021-07-28
suricata ET EXPLOIT GraphQL Introspection Query Attempt rev 1 2021-07-28
snort ET POLICY Cisco Data Center Network Manager - Vulnerable Version Detected 10.4 rev 1 2021-07-27
snort ET CURRENT_EVENTS Observed DNS Query to Known Scam/Phishing Domain rev 1 2021-07-27
snort ET TROJAN 44Calibar Variant Exfil via Telegram rev 2 2021-07-27
snort ET INFO Screenshot Uploaded to Discord rev 1 2021-07-27
snort ET TROJAN Lunar Builder Exfil Response rev 2 2021-07-27
snort ET TROJAN Lunar Builder Exfil via Discord M2 rev 2 2021-07-27