Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE TrueBot/Silence.Downlaoder Screenshot Post M2 rev 2 2024-03-26
suricata ET MALWARE MalDoc/Gamaredon CnC Activity M3 rev 2 2024-03-26
suricata ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M1 rev 3 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP BoostBeast Checkin M1 rev 2 2024-03-26
suricata ET INFO UncensoredDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Bitcoin QR Code Generated via Btcfrog.com rev 5 2024-03-26
suricata ET INFO dnsHome DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Origami.b / Donot DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP PUP/SpamFighter CnC Request rev 2 2024-03-26
suricata ET PHISHING Generic Credential Phish Landing Page 2022-12-07 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Manjusaka C2 Client Heartbeat rev 2 2024-03-26
suricata ET MALWARE Win32/Korplug.HQ CnC Activity rev 2 2024-03-26
suricata ET PHISHING Successful Facebook Phish 2022-07-18 rev 2 2024-03-26
suricata ET INFO jp.tiar DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Mullvad DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Zoom.us Phish 2021-10-25 rev 3 2024-03-26
suricata ET MALWARE TransparentTribe CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET ADWARE_PUP Win/Malware.FileTour Variant Checkin rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING GCash Credential Phish 2022-06-17 rev 2 2024-03-26
suricata ET MALWARE Win32/MagicRAT CnC Activity M1 rev 3 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-03-18 rev 3 2024-03-26
suricata ET INFO NoxPlayer Simulator Update Activity rev 3 2024-03-26
suricata ET MOBILE_MALWARE Android/Harly.AO CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET GAMES Moonlight Hack Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Observed OpenDrive Cloud Storage SSL Cert rev 2 2024-03-26
suricata ET MALWARE TA402/Molerats Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE WinPwn PenTesting Activity rev 2 2024-03-26
suricata ET INFO WeDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Aaflalo .me DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Edgy DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO FutaDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Octopus Backdoor Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO NextDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26