Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Artikel10 DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Andrews & Arnold DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Generic Credential Phish Landing Page M2 2023-02-22 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.SmsThief.ta CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Spy.SmsSpy.XC CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Facebook Phish 2022-07-18 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Guerrilla.h CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/Inido!rts Checkin rev 2 2024-03-26
suricata ET MALWARE Win32/MagicRAT CnC Activity M1 rev 3 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO bridges.torproject.org over TLS with SNI rev 4 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-06-01 rev 2 2024-03-26
suricata ET MALWARE Loki Locker Ransomware CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful MetaMask Pass Phrase Phish 2022-12-27 rev 2 2024-03-26
suricata ET INFO Mullvad DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Win32/TrojanDownloader.Agent.RFS Variant Checkin rev 2 2024-03-26
suricata ET MALWARE TA402/Molerats Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Observed OpenDrive Cloud Storage SSL Cert rev 2 2024-03-26
suricata ET MALWARE DarkCloud Stealer Key Logger Function Exfiltrating Data via Telegram rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE SManager Backdoor Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Iperius Remote Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Aaflalo .me DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE PhantomNet/Smanager Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Emirates NBD Bank Credential Phish 2022-06-23 rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Generic Credential Phish Landing Page M2 2022-10-11 rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Win32/PlugX Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Mullvad DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android/Spy.Agent.AKS CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful FedEx Phish 2022-07-20 rev 2 2024-03-26
suricata ET INFO LibreDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful Axie Infinity Credential Phish M2 2022-05-18 rev 2 2024-03-26