Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO DYNAMIC_DNS Query to a *.wspaperbag .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.fassen-shoes .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.rigaprecast .com domain rev 1 2025-09-11
snort ET INFO DYNAMIC_DNS Query to a *.cristianvaldes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.cristianvaldes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.knr .cl domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.douchisushi .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.shitstudent .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mindboggle .us domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.rigaprecast .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.wspaperbag .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.mindboggle .us domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.wspaperbag .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.digitalforest .my domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.shitstudent .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.digitalforest .my domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.knr .cl domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.fassen-shoes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.douchisushi .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.cristianvaldes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.mjfuentes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.viar3d .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rigaprecast .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.viar3d .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mjfuentes .com domain rev 1 2025-09-11
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.fassen-shoes .com domain rev 1 2025-09-11
suricata ET INFO Observed TelegramNotify User-Agent Outbound rev 1 2025-09-11
snort ET TROJAN TinyNuke Exfil User Profile via Telegram rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS HTTP Request to a *.sch-design .com .ar domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dadyal .pk domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS HTTP Request to a *.xenor .ro domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS Query to a *.sch-design .com .ar domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS Query to a *.dadyal .pk domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS Query to a *.abbotsfordhallforhire .org .au domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS HTTP Request to a *.xeonxu .info domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS Query to a *.certified .cl domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS HTTP Request to a *.certified .cl domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS Query to a *.xenor .ro domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS Query to a *.xeonxu .info domain rev 1 2025-09-10
snort ET INFO DYNAMIC_DNS HTTP Request to a *.abbotsfordhallforhire .org .au domain rev 1 2025-09-10