Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY DNS Query to DynDNS Domain *.eating-organic .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.viewdns .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servepics .com rev 2 2019-10-14
snort ET TROJAN NSO Group Pegasus CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.damnserver .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.homesecuritypc .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mypsx .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servep2p .com rev 2 2019-10-14
snort ET TROJAN NSO Group Pegasus CnC Domain Observed in DNS Query rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servehttp .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.myvnc .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.net-freaks .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.dynns .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.homesecuritymac .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.quicksytes .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.ciscofreak .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.loginto .me rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.myftp .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mymediapc .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servegame .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.securitytactics .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mlbfan .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servehalflife .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.servequake .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.myactivedirectory .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.serveexchange .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mysecuritycamera .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.serveirc .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mysecuritycamera .org rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.privatizehealthinsurance .net rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.mmafan .biz rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.dnsiskinky .com rev 2 2019-10-14
snort ET POLICY DNS Query to DynDNS Domain *.ddnsking .com rev 2 2019-10-12
snort ET POLICY DNS Query to DynDNS Domain *.ddns .net rev 2 2019-10-12
snort ET POLICY DNS Query to DynDNS Domain *.3utilities .com rev 2 2019-10-12
snort ET TROJAN Unknown Trojan with Fake Java User-Agent rev 3 2019-10-11
snort ET TROJAN CASHY200 CnC Domain in DNS Lookup rev 2 2019-10-10
snort ET TROJAN Java Archive sent when remote host claims to send an image rev 2 2019-10-10
snort ET TROJAN CASHY200 CnC Domain in DNS Lookup rev 2 2019-10-10
snort ET TROJAN CASHY200 CnC Domain in DNS Lookup rev 2 2019-10-10