Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.utdnews .com Domain rev 2 2024-09-16
suricata ET RETIRED Win/Malware.Filetour Variant Checkin M3 rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.nyphp .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .flexiblegeeks .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ninehells .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .i-taiwan .tv Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .lasboleras .com .ar Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.melaniebest .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .ekobilet .com .tr Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .42 .ar Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .ventapel .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.ninehells .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .jokertv .eu Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .hauganslekt .no Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .vanomania .net Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.sabaenergy .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.7s .com .tr Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.bakkoda .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .lscomm .net Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .elangtama .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .mrdev .com .ar Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .gingertom .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sabaenergy .com Domain rev 3 2024-09-16
suricata ET RETIRED Win/Malware.Filetour Variant Checkin M2 rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .gingertom .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ittqc .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .w6rob .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .ekobilet .com .tr Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a * .vanomania .net Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .icbcluj .ro Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a *.utdnews .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS Query to a * .benabood .com Domain rev 2 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.nyphp .com Domain rev 3 2024-09-16
suricata ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.fullsense .com .br Domain rev 2 2024-09-16
snort ET TROJAN Possible DarkFinger Payload Retrieval Attempt - ps10 rev 2 2024-09-13
snort ET TROJAN Possible DarkFinger tasklist Retrieval attempt rev 2 2024-09-13
snort ET TROJAN Fake Captcha Page Containing Powershell Inbound rev 1 2024-09-13
snort ET TROJAN Possible SSLoad Interactive Shell Connection rev 2 2024-09-13
snort ET WEB_SERVER Possible SQL Injection SELECT CAST in HTTP URI rev 3 2024-09-13
suricata ET MALWARE Fake Captcha Page Containing Powershell Inbound rev 1 2024-09-13