Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET HUNTING Observed TinyNuke Admin Panel URL Pattern rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE Observed CobaltStrike CnC Domain in TLS SNI rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE Win32/RisePro CnC Server Response M2 rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE SysJoker User-Agent Observed rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET INFO Netflix Streaming Player Access rev 5 2024-03-27
suricata ET MALWARE Observed CobaltStrike CnC Domain in TLS SNI rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE GORGON APT Download Activity M2 rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET PHISHING Successful Yahoo Credential Phish 2023-06-30 rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE SysJoker User-Agent Observed rev 2 2024-03-27
suricata ET MALWARE Win32/Fujacks Activity rev 16 2024-03-27
suricata ET MALWARE [DCSO] Andariel Exfil Activity rev 2 2024-03-27