Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.saptagunautama .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bigjaco .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.441creative .co .uk domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.brittainlawfirm .net domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.bucknine .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.richardwaddingham .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.441creative .co .uk domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.mwheller .co .uk domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.danleevogler .net domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mwheller .co .uk domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.cobraproject .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.rolotec .ro domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.portek .net .au domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.pohley .org domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.europeserv .org domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.brittainlawfirm .net domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.everich-airfreight .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.tuplantaforma .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.atcfirealarms .co .uk domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.richardwaddingham .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.cakk .us domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bucknine .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.bigjaco .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rolotec .ro domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.danleevogler .net domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.propertyshots .net domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.saptagunautama .com domain rev 1 2026-07-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.pohley .org domain rev 1 2026-07-05
splunk Windows Large Number of Computer Service Tickets Requested production 2026-07-05
sigma Execution Of Non-Existing File test 2026-07-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.segurosdepersonas .cl domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS Query to a *.bdumitriu .ro domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.barney .ro domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS Query to a *.barhousefarm .co .uk domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS Query to a *.iseasy .tw domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.edah .us domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.rima .cl domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS Query to a *.casadotricolor .com .br domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS Query to a *.aerwear .ro domain rev 1 2026-07-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.mouregazet .com .ar domain rev 1 2026-07-04