Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO Apache Solr System Information Request rev 5 2026-01-20
snort ET INFO Possible NOP Sled Observed in Large DNS over TCP Packet M1 rev 2 2026-01-20
snort ET INFO F5 BIG-IP - Command Execution via util/bash rev 2 2026-01-20
snort ET INFO SonicWall SMA Multiple CIFS Server Bookmark Creation rev 2 2026-01-20
snort ET INFO Flowise Reset Password with tempToken rev 3 2026-01-20
snort ET INFO DYNAMIC_DNS Query to a *.kawaiiarts .com domain rev 1 2026-01-20
snort ET INFO Python aiohttp User-Agent Observed Inbound rev 2 2026-01-20
snort ET INFO Liferay JSON Web Services Invoker rev 3 2026-01-20
suricata ET INFO Python aiohttp User-Agent Observed Inbound rev 2 2026-01-20
suricata ET INFO Possible NOP Sled Observed in Large DNS over TCP Packet M2 rev 3 2026-01-20
suricata ET EXPLOIT F5 BIG-IP - Password Reset Attempt - Observed Post CVE-2023-46747 Activity rev 3 2026-01-20
suricata ET INFO Flowise Exposed User tempToken rev 3 2026-01-20
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kawaiiarts .com domain rev 1 2026-01-20
suricata ET INFO SonicWall SMA Multiple CIFS Server Bookmark Creation rev 2 2026-01-20
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.kawaiiarts .com domain rev 1 2026-01-20
suricata ET INFO Apache Solr System Information Request rev 4 2026-01-20
suricata ET INFO vk .com API Usage Observed rev 3 2026-01-20
suricata ET INFO Dropbox paper Document Request Observed rev 2 2026-01-20
suricata ET INFO Flowise Reset Password with tempToken rev 3 2026-01-20
suricata ET INFO Commvault Server Hostname Observed in HTTP Response rev 3 2026-01-20
suricata ET INFO Spring Boot Actuator Health Check Request rev 2 2026-01-20
suricata ET INFO PDQ Remote Management Agent HTTP Activity rev 2 2026-01-20
suricata ET EXPLOIT F5 BIG-IP - Successful Password Reset Attempt - Observed Post CVE-2023-46747 Activity rev 3 2026-01-20
suricata ET INFO PDQ Remote Management Agent Checkin rev 2 2026-01-20
suricata ET INFO F5 BIG-IP - Command Execution via util/bash rev 2 2026-01-20
suricata ET EXPLOIT F5 BIG-IP - Successful Command Execution via util/bash rev 3 2026-01-20
suricata ET INFO Liferay JSON Web Services Invoker rev 2 2026-01-20
suricata ET INFO Possible NOP Sled Observed in Large DNS over TCP Packet M1 rev 2 2026-01-20
sigma File Creation Date Changed to Another Year test 2026-01-20
snort ET INFO DYNAMIC_DNS Query to a *.sulevkivastik .ee domain rev 1 2026-01-18
snort ET INFO DYNAMIC_DNS HTTP Request to a *.sulevkivastik .ee domain rev 1 2026-01-18
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.sulevkivastik .ee domain rev 1 2026-01-18
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sulevkivastik .ee domain rev 1 2026-01-18
snort ET INFO DYNAMIC_DNS HTTP Request to a *.primeops .net domain rev 1 2026-01-17
snort ET INFO DYNAMIC_DNS Query to a *.primeops .net domain rev 1 2026-01-17
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.primeops .net domain rev 1 2026-01-17
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.primeops .net domain rev 1 2026-01-17
snort ET TROJAN ZeroTrace CnC Server Settings Inbound rev 1 2026-01-16
suricata ET MALWARE ZeroTrace CnC Server Settings Inbound rev 1 2026-01-16
elastic Deprecated - AWS ElastiCache Security Group Created deprecated 2026-01-16