Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Possible Windows Binary Observed in SSL/TLS Certificate rev 4 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE Observed CobaltStrike CnC Domain in TLS SNI rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE JsOutProx CnC Activity - Inbound rev 4 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET HUNTING Suspicious Empty SSL Certificate - Observed in Cobalt Strike rev 7 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET HUNTING Possible Successful Generic Phish to webwave .dev Domain 2023-05-24 rev 2 2024-03-27
suricata ET MALWARE Observed CobaltStrike CnC Domain in TLS SNI rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE [ANY.RUN] Win32/Lumma Stealer Configuration Request Attempt rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE SysJoker User-Agent Observed rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE Suspicious UA Mozilla / 4.0 rev 8 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE Lumma Stealer Related Activity M2 rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET USER_AGENTS Kimsuky CnC Checkin User-Agent rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27