Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO DYNAMIC_DNS HTTP Request to a *.mattlucas .info domain rev 1 2025-09-29
snort ET INFO DYNAMIC_DNS Query to a *.mattlucas .info domain rev 1 2025-09-29
snort ET INFO DYNAMIC_DNS HTTP Request to a *.waser-consulting .ch domain rev 1 2025-09-29
snort ET INFO DYNAMIC_DNS HTTP Request to a *.entschleunigungscoach .ch domain rev 1 2025-09-29
snort ET INFO DYNAMIC_DNS Query to a *.hbplw .ch domain rev 1 2025-09-29
snort ET INFO DYNAMIC_DNS Query to a *.waser-consulting .ch domain rev 1 2025-09-29
snort ET INFO DYNAMIC_DNS HTTP Request to a *.martindonnelly .com .au domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mattlucas .info domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.martindonnelly .com .au domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.waser-consulting .ch domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.martindonnelly .com .au domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.entschleunigungscoach .ch domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.mattlucas .info domain rev 1 2025-09-29
suricata ET MALWARE Nimbus Manticore Minibrowse Backdoor CnC Checkin rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.hbplw .ch domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.hbplw .ch domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.entschleunigungscoach .ch domain rev 1 2025-09-29
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.waser-consulting .ch domain rev 1 2025-09-29
snort ET INFO DYNAMIC_DNS Query to a *.biranchipoudyal .com .np domain rev 1 2025-09-27
snort ET INFO DYNAMIC_DNS HTTP Request to a *.biranchipoudyal .com .np domain rev 1 2025-09-27
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.biranchipoudyal .com .np domain rev 1 2025-09-27
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.biranchipoudyal .com .np domain rev 1 2025-09-27
snort ET INFO DYNAMIC_DNS Query to a *.reisezeiter .ch domain rev 1 2025-09-25
snort ET WEB_SPECIFIC_APPS Fortra GoAnywhere MFT Response Valid License Request Token Disclosure rev 1 2025-09-25
snort ET INFO DYNAMIC_DNS HTTP Request to a *.reisezeiter .ch domain rev 1 2025-09-25
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.reisezeiter .ch domain rev 1 2025-09-25
suricata ET WEB_SPECIFIC_APPS Fortra GoAnywhere MFT Response Valid License Request Token Disclosure rev 1 2025-09-25
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.reisezeiter .ch domain rev 1 2025-09-25
sigma RunMRU Registry Key Deletion - Registry experimental 2025-09-25
sigma RunMRU Registry Key Deletion experimental 2025-09-25
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dikpalkc .com .np domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS Query to a *.mecanicatecnicar .com .ar domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS HTTP Request to a *.thisisnothing .pw domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS Query to a *.qwe-qwe .me domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS HTTP Request to a *.clientesussalarmas .com .ar domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS HTTP Request to a *.stadtwandern .ch domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS HTTP Request to a *.qwe-qwe .me domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS Query to a *.ingredientsplus .com .my domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS HTTP Request to a *.rauszeiter .ch domain rev 1 2025-09-24
snort ET INFO DYNAMIC_DNS Query to a *.tirri .com .ar domain rev 1 2025-09-24