Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO DYNAMIC_DNS Query to a *.qualitynet .com .br domain rev 1 2025-09-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.qualitynet .com .br domain rev 1 2025-09-05
snort ET INFO DYNAMIC_DNS HTTP Request to a *.briantorreyscott .com domain rev 1 2025-09-05
snort ET TROJAN GhostRedirector Rungan Backdoor Access M2 rev 1 2025-09-05
snort ET INFO DYNAMIC_DNS Query to a *.docucax .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.vvvrm .net domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.qualitynet .com .br domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.zonagolpeada .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.docucax .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mmsalles .com .br domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rufinocabrera .cl domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.xmpc .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.itlogistics .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.vacantcranium .net domain rev 1 2025-09-05
suricata ET MALWARE GhostRedirector Rungan Backdoor Access M4 rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.toconline .ch domain rev 1 2025-09-05
suricata ET MALWARE GhostRedirector Rungan Backdoor Access M2 rev 1 2025-09-05
suricata ET MALWARE GhostRedirector Rungan Backdoor Access M3 rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.xmpc .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.truck-occasion .ch domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.qualitynet .com .br domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.glenalmond .com .au domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.vacantcranium .net domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.briantorreyscott .com domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.truck-occasion .ch domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.mmsalles .com .br domain rev 1 2025-09-05
suricata ET MALWARE GhostRedirector Rungan Backdoor Access M1 rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.itlogistics .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.toconline .ch domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.vvvrm .net domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.zonagolpeada .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.glenalmond .com .au domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.docucax .com .ar domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.rufinocabrera .cl domain rev 1 2025-09-05
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.briantorreyscott .com domain rev 1 2025-09-05
snort ET TROJAN Quad7 Botnet - Outbound zylogin Telnet Prompt from Compromised Endpoint rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.hameau .cl domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.vomytdaug .com domain rev 1 2025-09-04
snort ET TROJAN Quad7 Botnet - Outbound alogin Telnet Prompt from Compromised Endpoint rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.dsn-hkpr .ca domain rev 1 2025-09-04