Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SERVER Predator the Thief Password Prompt Accessed on Internal Compromised Server rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
suricata ET WEB_SERVER Predator the Thief Password Prompt Accessed on Internal Compromised Server rev 2 2020-07-03
suricata ET WEB_CLIENT Predator the Thief Password Prompt Accessed on External Compromised Server rev 2 2020-07-03
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
snort ET TROJAN Lucifer CnC Checkin rev 1 2020-07-02
snort ET TROJAN AlinaPOS Exfiltration via DNS rev 2 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
suricata ET MALWARE Lucifer CnC Checkin rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
suricata ET MALWARE AlinaPOS Exfiltration via DNS rev 1 2020-07-02
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Suspected Glupteba Download rev 2 2020-07-01
snort ET TROJAN Suspected Glupteba Download rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Observed StrongPity CnC Domain in TLS SNI rev 2 2020-07-01
snort ET TROJAN Glupteba CnC Checkin rev 2 2020-07-01