Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.auszeitseminar .ch domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ruhezeiter .ch domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.tucapelenergia .cl domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.flowtemp .ro domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ultraexpress .com .ar domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.pralad .com .np domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bishallimbu .com .np domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.catcher .ru domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.data-line .gr domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dewarp .me domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.drciocan .ro domain rev 1 2025-09-14
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.auszeitseminar .ch domain rev 1 2025-09-14
snort ET INFO DYNAMIC_DNS Query to a *.allen-software .com domain rev 1 2025-09-13
snort ET INFO DYNAMIC_DNS Query to a *.bridgetech .ec domain rev 1 2025-09-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.allen-software .com domain rev 1 2025-09-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.bridgetech .ec domain rev 1 2025-09-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bridgetech .ec domain rev 1 2025-09-13
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.allen-software .com domain rev 1 2025-09-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.bridgetech .ec domain rev 1 2025-09-13
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.allen-software .com domain rev 1 2025-09-13
snort ET INFO DYNAMIC_DNS HTTP Request to a *.u-resort .com domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.qs0 .de domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.bernhard-rau .de domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.art-motel .com domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.o-rg .net domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.lyxcorp .com domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.bernhard-rau .de domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.art-motel .com domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.o-rg .net domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.bernhard-rau .com domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.lyxcorp .com domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.enenet .co .uk domain rev 1 2025-09-12
snort ET TROJAN Oyster Backdoor CnC Checkin M3 rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.bernhard-rau .com domain rev 1 2025-09-12
snort ET TROJAN Oyster Backdoor CnC Checkin M2 rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.enenet .co .uk domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS HTTP Request to a *.qs0 .de domain rev 1 2025-09-12
snort ET INFO DYNAMIC_DNS Query to a *.u-resort .com domain rev 1 2025-09-12
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.u-resort .com domain rev 1 2025-09-12
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.lyxcorp .com domain rev 1 2025-09-12