Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY DNS Query for try2check.me Carder Tool rev 4 2019-08-28
snort ET DNS DNS Query for Suspicious .ch.vu Domain rev 5 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET TROJAN DNS query for Morto RDP worm related domain jaifr.com rev 3 2019-08-28
snort ET TROJAN XCodeGhost DNS Lookup rev 2 2019-08-28
snort ET TROJAN APT28 DealersChoice DNS Lookup rev 3 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN LYCEUM CnC Domain Observed in DNS Query rev 2 2019-08-28
snort ET TROJAN APT28 DealersChoice DNS Lookup rev 3 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN APT32 Komprogo DNS Lookup rev 3 2019-08-28
snort ET TROJAN OSX/Mughthesec/SafeFinder/OperatorMac DNS Query Observed rev 3 2019-08-28
snort ET TROJAN LYCEUM CnC Domain Observed in DNS Query rev 2 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN Lazarus Decafett DNS Lookup 3 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 10 rev 2 2019-08-28
snort ET POLICY Android Adups Firmware DNS Query 4 rev 2 2019-08-28
snort ET TROJAN ABUSE.CH Locky Domain rev 2 2019-08-28
snort ET TROJAN DNS Request for Zaletelly CnC Domain rev 2 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 1 rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 45 rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 25 rev 2 2019-08-28
snort ET TROJAN Spora Ransomware DNS Query rev 2 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN Possible WannaCry DNS Lookup 1 rev 4 2019-08-28
snort ET CURRENT_EVENTS SUSPICIOUS DNS Request for Grey Advertising Often Leading to EK rev 3 2019-08-28
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 2 2019-08-28
snort ET TROJAN Win32/Pift DNS TXT CnC Lookup ppift.net rev 4 2019-08-28
snort ET TROJAN APT28 DealersChoice DNS Lookup rev 3 2019-08-28
snort ET WEB_CLIENT Possible Fake AV Phone Scam Long Domain M1 Feb 29 rev 3 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN CFR DRIVEBY CVE-2012-4792 DNS Query for C2 domain rev 3 2019-08-28
snort ET TROJAN Sofacy DNS Lookup rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup updatesoftware24.com rev 3 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 23 rev 2 2019-08-28
snort ET TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET DNS DNS Lookup for localhost.DOMAIN.TLD rev 4 2019-08-28