Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
elastic Deprecated - AWS RDS Cluster Creation deprecated 2026-01-16
elastic Deprecated - AWS RDS Security Group Creation deprecated 2026-01-16
elastic Deprecated - AWS RDS Instance Creation deprecated 2026-01-16
elastic Deprecated - AWS Redshift Cluster Creation deprecated 2026-01-16
elastic Deprecated - AWS ElastiCache Security Group Created deprecated 2026-01-16
elastic Deprecated - AWS RDS Security Group Deletion deprecated 2026-01-16
elastic Deprecated - AWS RDS Instance/Cluster Stoppage deprecated 2026-01-16
elastic Deprecated - AWS EC2 VM Export Failure deprecated 2026-01-16
snort ET INFO Exfil to FormSpark Form rev 1 2026-01-14
snort ET CURRENT_EVENTS Exfil to FormSpark Form from Netlify rev 1 2026-01-14
suricata ET INFO Exfil to FormSpark Form rev 1 2026-01-14
suricata ET PHISHING Exfil to FormSpark Form from Netlify rev 1 2026-01-14
snort ET INFO DYNAMIC_DNS Query to a *.ddos .im domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.cvr .co .id domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.brb .dj domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS Query to a *.tvlinux .com domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS Query to a *.psychology48 .com domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ddos .im domain rev 1 2026-01-13
snort ET INFO Landing Page with Form Exfil to submit-form .com rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS Query to a *.cvr .co .id domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.psychology48 .com domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.thenme .net domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.tvlinux .com domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS Query to a *.thenme .net domain rev 1 2026-01-13
snort ET INFO DYNAMIC_DNS Query to a *.brb .dj domain rev 1 2026-01-13
suricata ET INFO Landing Page with Form Exfil to submit-form .com rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.brb .dj domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.cvr .co .id domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.cvr .co .id domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.tvlinux .com domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.thenme .net domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ddos .im domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.brb .dj domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.psychology48 .com domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.tvlinux .com domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.thenme .net domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ddos .im domain rev 1 2026-01-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.psychology48 .com domain rev 1 2026-01-13
snort ET CURRENT_EVENTS GhostFrame Phish Landing Page M2 2026-01-05 rev 2 2026-01-12
snort ET INFO DYNAMIC_DNS Query to a *.generaloweb .com domain rev 1 2026-01-12