Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dsn-hkpr .ca domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.thesqueakandoilchart .com domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dstand .com .au domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.vomytdaug .com domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.sismonda .com .ar domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.dstand .com .au domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.thesqueakandoilchart .com domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.thesqueakandoilmanual .com domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.thesqueakandoilformula .com domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.betertech .com .ar domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.dsn-hkpr .ca domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.dicosmo .com .au domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.avtoservis-hladin .si domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.hameau .cl domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.betertech .com .ar domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.thesqueakandoilmanual .com domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.thesqueakandoilformula .com domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.vomytdaug .com domain rev 1 2025-09-04
snort ET TROJAN Quad7 Botnet - Outbound zylogin Telnet Prompt from Compromised Endpoint rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.avtoservis-hladin .si domain rev 1 2025-09-04
snort ET TROJAN Quad7 Botnet - Outbound rlogin Telnet Prompt from Compromised Endpoint rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.mygadgets .com .ar domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.sismonda .com .ar domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS Query to a *.mygadgets .com .ar domain rev 1 2025-09-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dicosmo .com .au domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dicosmo .com .au domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.dsn-hkpr .ca domain rev 1 2025-09-04
suricata ET MALWARE Quad7 Botnet UPDTAE Backdoor CnC Checkin rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.avtoservis-hladin .si domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dstand .com .au domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.avtoservis-hladin .si domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.dstand .com .au domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.thesqueakandoilmanual .com domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.mygadgets .com .ar domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.thesqueakandoilmanual .com domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.thesqueakandoilformula .com domain rev 1 2025-09-04
suricata ET MALWARE Quad7 Botnet - Outbound alogin Telnet Prompt from Compromised Endpoint rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dsn-hkpr .ca domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.petterisaak .com domain rev 1 2025-09-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.thesqueakandoilchart .com domain rev 1 2025-09-04