Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Null31 DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Win32/SilentBreak Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO WeDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Prometei Botnet CnC DGA - xinchao Pattern rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Internet Initiative Japan DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful Onedrive Credential Phish 2022-06-22 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/TrojanDownloader.Agent.GEM CnC Checkin rev 3 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful DHL Credential Phish M1 2022-06-09 rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful RoundCube Phish 2022-07-18 rev 2 2024-03-26
suricata ET INFO bridges.torproject.org over TLS with SNI rev 4 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Qihoo 360 DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-12 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.SmsThief.ta CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-12-06 rev 2 2024-03-26
suricata ET MALWARE MSIL/Bobik CnC Traffic rev 3 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET HUNTING Generic - Mozilla 4.0 EXE Request rev 9 2024-03-26
suricata ET INFO Keweon Center DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO PureDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Open Internet DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Observed Iperius Remote Domain in TLS SNI rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO SyncroMSP Remote Remote Management Software Install Checkin rev 2 2024-03-26
suricata ET INFO File Shared via Zoom rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Agent.aam CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET GAMES Moonlight Hack Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Zoom.us Phish 2021-10-25 rev 3 2024-03-26
suricata ET MALWARE Manjusaka C2 Client Heartbeat rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Harly.AO CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE TransparentTribe CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/Korplug.HQ CnC Activity rev 2 2024-03-26