Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Konni Group CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-26 rev 2 2024-03-26
suricata ET MALWARE WinPwn PenTesting Activity rev 2 2024-03-26
suricata ET DNS Hiloti DNS CnC Channel Successful Install Message rev 4 2024-03-26
suricata ET PHISHING Successful Axie Infinity Credential Phish M2 2022-05-18 rev 2 2024-03-26
suricata ET INFO Edgy DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET GAMES Solaris2 Checkin rev 2 2024-03-26
suricata ET MALWARE Octopus Backdoor Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Bitcoin QR Code Generated via Btcfrog.com rev 5 2024-03-26
suricata ET INFO WeDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful Telstra Credential Phish 2022-08-29 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android.Backdoor.866.origin CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP BoostBeast Checkin M1 rev 2 2024-03-26
suricata ET GAMES Moonlight Hack Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE CopperStealer - Browser Stealer Exfil via Telegram rev 2 2024-03-26
suricata ET INFO Public Array DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE DazzleSpy Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE TA402/Molerats Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE TrueBot/Silence.Downlaoder Screenshot Post M2 rev 2 2024-03-26
suricata ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M1 rev 3 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Loki Locker Ransomware CnC Activity rev 3 2024-03-26
suricata ET MOBILE_MALWARE Observed Trojan-Spy.AndroidOS.Origami.b / Donot Domain in TLS SNI rev 2 2024-03-26
suricata ET CURRENT_EVENTS Sliver Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Hitian .me DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP Win/Malware.Filetour Variant Checkin M1 rev 3 2024-03-26
suricata ET INFO Bortzmeyer DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Go/PSW.Agent_AGen.A Data Exfil rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Ransom.AndroidOS.Agent.bi CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO DigitalSize DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET ADWARE_PUP Win32/Adware.Neoreklami.MI Activity M2 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Keweon Center DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO DNSPod DNS Over HTTPS Certificate Inbound rev 2 2024-03-26