Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN DNSChanger CnC Domain in DNS Lookup rev 2 2019-10-01
snort ET INFO Windows OS Submitting USB Metadata to Microsoft rev 3 2019-09-30
suricata ET MALWARE JavaRAT CnC Init Activity rev 2 2019-09-28
suricata ET MALWARE LuminosityLink - Inbound Data Channel CnC Delimiter rev 2 2019-09-28
suricata ET MALWARE Houdini/Hworm CnC Checkin M1 rev 3 2019-09-28
suricata ET MALWARE ELF/Emptiness v1.1 CnC Checkin rev 2 2019-09-28
suricata ET MALWARE njRAT Variant Outbound CnC Beacon rev 2 2019-09-28
suricata ET MALWARE Mirai Variant Checkin Response rev 2 2019-09-28
suricata ET MALWARE LuminosityLink - Outbound Data Channel CnC Delimiter rev 2 2019-09-28
suricata ET MALWARE JavaRAT Requesting Screen Size rev 3 2019-09-28
suricata ET MALWARE ELF/Emptiness v1 CnC Checkin rev 2 2019-09-28
snort ET TROJAN DNSBin Demo - Data Exfil rev 2 2019-09-27
snort ET TROJAN DNSBin Demo - Data Inbound rev 2 2019-09-27
snort ET MALWARE Win32/Adware.iBryte.BO CnC Activity rev 2 2019-09-26
snort ET TROJAN Win32/Flooder.Agent.NAS CnC Domain in DNS Lookup rev 2 2019-09-26
suricata ET SCAN Internal to Internal UPnP Request tcp port 2555 rev 4 2019-09-26
suricata ET SCAN External to Internal UPnP Request tcp port 2555 rev 6 2019-09-26
snort ET TROJAN DonotGroup CnC Domain Observed in DNS Query rev 2 2019-09-25
snort ET MOBILE_MALWARE MOONSHINE payload C2 activity rev 2 2019-09-25
snort ET TROJAN Possible DeadlyKiss APT CnC Domain Observed in DNS Query rev 2 2019-09-25
snort ET TROJAN Possible DeadlyKiss APT CnC Domain Observed in DNS Query rev 2 2019-09-25
snort ET TROJAN Tortoiseshell/SysKit CnC Activity rev 2 2019-09-24
snort ET TROJAN OSX/GMERA.B CnC Checkin rev 2 2019-09-24
snort ET TROJAN DonotGroup CnC Domain Observed in DNS Query rev 2 2019-09-23
snort ET TROJAN DonotGroup CnC Domain Observed in DNS Query rev 2 2019-09-23
snort ET CURRENT_EVENTS Facebook Phishing Domain in DNS Lookup rev 2 2019-09-21
snort ET MALWARE BundledInstaller PUA/PUP Downloader rev 2 2019-09-20
snort ET TROJAN DNSG - Data Exfiltration via DNS rev 2 2019-09-19
snort ET TROJAN Magecart CnC Domain Observed in DNS Query rev 2 2019-09-19
snort ET TROJAN Magecart CnC Domain Observed in DNS Query rev 2 2019-09-19
snort ET TROJAN Magecart CnC Domain Observed in DNS Query rev 2 2019-09-19
snort ET TROJAN Possible GhostMiner CCBOT Component - CnC Checkin rev 2 2019-09-19
snort ET TROJAN Magecart CnC Domain Observed in DNS Query rev 2 2019-09-19
snort ET MALWARE Win32/GameHack.DJC CnC Activity rev 2 2019-09-19
snort ET TROJAN Magecart CnC Domain Observed in DNS Query rev 2 2019-09-19
snort ET TROJAN Magecart CnC Domain Observed in DNS Query rev 2 2019-09-19
snort ET TROJAN Plead TSCookie CnC Checkin M4 rev 2 2019-09-18
snort ET TROJAN Plead TSCookie CnC Checkin M1 rev 2 2019-09-18
snort ET TROJAN Plead TSCookie CnC Checkin M2 rev 2 2019-09-18
snort ET TROJAN Plead TSCookie CnC Checkin M3 rev 2 2019-09-18