Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.shakemanor .com domain rev 1 2025-04-07
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.tyden .name domain rev 1 2025-04-07
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.shakemanor .com domain rev 1 2025-04-07
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.lexgardner .com domain rev 1 2025-04-07
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.lexgardner .com domain rev 1 2025-04-07
snort ET INFO DYNAMIC_DNS Query to a *.phunkmasterz .com domain rev 1 2025-04-04
snort ET INFO DYNAMIC_DNS Query to a *.prayerforworldpeace .com domain rev 1 2025-04-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.prayerforworldpeace .com domain rev 1 2025-04-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.phunkmasterz .com domain rev 1 2025-04-04
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.prayerforworldpeace .com domain rev 1 2025-04-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.phunkmasterz .com domain rev 1 2025-04-04
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.prayerforworldpeace .com domain rev 1 2025-04-04
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.phunkmasterz .com domain rev 1 2025-04-04
snort ET INFO DYNAMIC_DNS HTTP Request to a *.daveengineer .com domain rev 1 2025-04-03
snort ET INFO DYNAMIC_DNS Query to a *.daveengineer .com domain rev 1 2025-04-03
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.daveengineer .com domain rev 1 2025-04-03
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.daveengineer .com domain rev 1 2025-04-03
sigma Potential PowerShell Console History Access Attempt via History File experimental 2025-04-03
snort ET USER_AGENTS Deprecated Xiaomi Mi Browser User-Agent Observed rev 1 2025-04-02
suricata ET USER_AGENTS Deprecated Xiaomi Mi Browser User-Agent Observed rev 1 2025-04-02
snort ET INFO DYNAMIC_DNS Query to a *.ourtownguttercleaning .com domain rev 1 2025-03-31
snort ET TROJAN MonsterV2 Stealer CnC Checkin rev 1 2025-03-31
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ourtownguttercleaning .com domain rev 1 2025-03-31
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ourtownguttercleaning .com domain rev 1 2025-03-31
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ourtownguttercleaning .com domain rev 1 2025-03-31
suricata ET MALWARE MonsterV2 Stealer CnC Checkin rev 1 2025-03-31
snort ET INFO DYNAMIC_DNS HTTP Request to a *.vbrao .com domain rev 1 2025-03-30
snort ET INFO DYNAMIC_DNS HTTP Request to a *.africaddy .com domain rev 1 2025-03-30
snort ET INFO DYNAMIC_DNS HTTP Request to a *.gfplace .com domain rev 1 2025-03-30
snort ET INFO DYNAMIC_DNS Query to a *.gfplace .com domain rev 1 2025-03-30
snort ET INFO DYNAMIC_DNS Query to a *.africaddy .com domain rev 1 2025-03-30
snort ET INFO DYNAMIC_DNS Query to a *.vbrao .com domain rev 1 2025-03-30
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.vbrao .com domain rev 1 2025-03-30
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.vbrao .com domain rev 1 2025-03-30
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.gfplace .com domain rev 1 2025-03-30
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.africaddy .com domain rev 1 2025-03-30
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.africaddy .com domain rev 1 2025-03-30
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.gfplace .com domain rev 1 2025-03-30
snort ET INFO DYNAMIC_DNS Query to a *.davidandjacquelinebarbee .com domain rev 1 2025-03-29
snort ET INFO DYNAMIC_DNS HTTP Request to a *.davidandjacquelinebarbee .com domain rev 1 2025-03-29