Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.benrowland .net domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dagmaar .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.uwgraduation .org domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.chocopicacho .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ttyemupt .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.226vitech .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.giuras .org domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.hkmtta .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.fysiomotion .se domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ugnss .net domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.le-baux .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.donvogler .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.molgas .org domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.c-abogados .com .ar domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rotorootie .net domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.c-abogados .com .ar domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.sexualidadesrosario .com .ar domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.highdesertcoders .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kryksyh .org domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.jacqandwillwentupthehill .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.theinoob .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.homegecko .org domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.laramonti .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.hkmtta .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.e-alon .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sostech .net .au domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.wahasinarmas .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.technoreform .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.fuckwikia .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.seclogistic .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.golubovic .com .ar domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.insermase .net domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.alabamasalesrecruitment .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ranftl .org domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.zombiehitmen .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.manasrajaram .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ranftl .org domain rev 1 2026-07-02
suricata ET MALWARE MarkiRAT Data Exfiltration Attempt rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.e1-racecar .com domain rev 1 2026-07-02
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bfbsystems .net domain rev 1 2026-07-02