Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET RETIRED ISMAgent Receiving Commands from CnC Server rev 4 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .gazmuri .cl Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .hauganslekt .no Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .lscomm .net Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .lasboleras .com .ar Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .jansolo .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .w6rob .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .joaopinho .adv .br Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .ltlegl .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .dmtr .ru Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .uggbootsale .net Domain rev 1 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a * .backriverphotography .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.melaniebest .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .hauganslekt .no Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS HTTP Request to a *.nyphp .com Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a * .afaa .it Domain rev 2 2024-09-16
snort ET INFO DYNAMIC_DNS Query to a *.ro0t .hm Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .42 .ar Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.nyphp .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .joaopinho .adv .br Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.fullsense .com .br Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.doorsnknobs .net Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .pavlov .su Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .joaopinho .adv .br Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .dmtr .ru Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .avtosnoj .si Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .vanomania .net Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .elrecreo .com .mx Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rasenftinc .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .backriverphotography .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .uggbootsale .net Domain rev 1 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ittqc .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bakkoda .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .w6rob .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.nyphp .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .allaround .hk Domain rev 2 2024-09-16
suricata ET RETIRED Win/Malware.Filetour Variant Checkin M3 rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ninehells .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ittqc .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .arybarbosa .com Domain rev 2 2024-09-16