Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Manhattan College Credential Phish 2022-01-10 rev 2 2024-03-26
suricata ET PHISHING GCash Credential Phish 2022-06-17 rev 2 2024-03-26
suricata ET MALWARE Win32/Korplug.HQ CnC Activity rev 2 2024-03-26
suricata ET INFO Iperius Remote Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO bridges.torproject.org over TLS with SNI rev 4 2024-03-26
suricata ET ADWARE_PUP Win/Malware.FileTour Variant Checkin rev 2 2024-03-26
suricata ET MALWARE TA402/Molerats Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE DarkCloud Stealer Key Logger Function Exfiltrating Data via Telegram rev 2 2024-03-26
suricata ET PHISHING Successful Facebook Phish 2022-07-18 rev 2 2024-03-26
suricata ET MALWARE SManager Backdoor Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Bebasid DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE TransparentTribe CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Manjusaka C2 Client Heartbeat rev 2 2024-03-26
suricata ET INFO Restena DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO ControlId DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE CopperStealer - Remote Desktop - Initial Checkin rev 2 2024-03-26
suricata ET MALWARE Loki Locker Ransomware CnC Activity rev 3 2024-03-26
suricata ET MALWARE TA402/Molerats Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP Win/Malware.Filetour Variant Checkin M1 rev 3 2024-03-26
suricata ET PHISHING Successful Telstra Credential Phish 2022-08-29 rev 2 2024-03-26
suricata ET PHISHING Successful Axie Infinity Credential Phish M1 2022-05-18 rev 2 2024-03-26
suricata ET MALWARE Observed DNS Query to Pegasus Domain rev 2 2024-03-26
suricata ET INFO CZ.NIC DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Ghostwriter/UNC1151 Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/Sabsik.FL.B!ml Exfil rev 2 2024-03-26
suricata ET MALWARE Win32/Trickbot Data Exfiltration M3 rev 3 2024-03-26
suricata ET MALWARE DazzleSpy Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Rewardsteal.e CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO WeDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Public Array DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Dridex CnC Request - Spam/Worm Component rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-26 rev 2 2024-03-26
suricata ET INFO Bortzmeyer DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Hitian .me DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET ADWARE_PUP BoostBeast Checkin M1 rev 2 2024-03-26
suricata ET INFO Clearbit Logo Query in DNS Lookup rev 2 2024-03-26
suricata ET INFO Bitcoin QR Code Generated via Btcfrog.com rev 5 2024-03-26
suricata ET MALWARE MalDoc/Gamaredon CnC Activity M3 rev 2 2024-03-26