Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO DNS For Family DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Origami.b / Donot DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Konni Group CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/WhiskerSpy CnC Activity rev 2 2024-03-26
suricata ET PHISHING Successful Binance Credential Phish 2022-10-07 rev 2 2024-03-26
suricata ET MALWARE Dridex CnC Request - Spam/Worm Component rev 2 2024-03-26
suricata ET MALWARE Win32/Trickbot Data Exfiltration M4 rev 3 2024-03-26
suricata ET INFO ffmuc DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Observed BlackLotus SSL Certificate Observed rev 2 2024-03-26
suricata ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M1 rev 3 2024-03-26
suricata ET INFO DNSlow DNS Over HTTPS Certificate Inbound rev 3 2024-03-26
suricata ET ADWARE_PUP PUP/SpamFighter CnC Request rev 2 2024-03-26
suricata ET INFO DnsCrypt DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful Axie Infinity Credential Phish M1 2022-05-18 rev 2 2024-03-26
suricata ET INFO DnsCrypt DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP BoostBeast Checkin M1 rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO MyDNS .network DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Hact .be Pentesting CnC Activity rev 2 2024-03-26
suricata ET MALWARE CopperStealer - Browser Stealer Exfil via Telegram rev 2 2024-03-26
suricata ET MALWARE Win32/MagicRAT CnC Activity M2 rev 2 2024-03-26
suricata ET INFO Iperius Remote Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.SmsThief.ta CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO bridges.torproject.org over TLS with SNI rev 4 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Internet Initiative Japan DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Guerrilla.h CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.GoatRat CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Njalla DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE DCRat Initial Checkin Server Response M6 rev 3 2024-03-26
suricata ET INFO Restena DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET DNS APT_NGO_wuaclt C2 Domain micorsofts.com rev 4 2024-03-26
suricata ET MALWARE Win32/TrojanDownloader.Agent.RFS Variant Checkin rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Rezhajul DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful DHL Credential Phish M2 2022-06-09 rev 2 2024-03-26
suricata ET MALWARE Win32/Webdor.NAC Variant CnC Activity rev 2 2024-03-26