Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
splunk Linux Malformed Auth Entry production 2026-05-06
sigma Suspicious WSL InstallLocation Registry Key Modification Via CommandLine experimental 2026-05-05
sigma Potential WSL Binary Modification from Installed Location experimental 2026-05-05
sigma Potential WSL InstallLocation Registry Key Modification experimental 2026-05-05
sigma Suspicious WSL Binary Hijack via Proxy Execution experimental 2026-05-05
sigma Suspicious WSL Binary Masquerading experimental 2026-05-05
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
snort ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Observed Transportation Cargo Theft Domain in TLS SNI rev 1 2026-05-04
suricata ET INFO Transportation Cargo Theft Domain in DNS Lookup rev 1 2026-05-04