Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO GG Url Shortener Observed in DNS Query rev 5 2024-03-26
suricata ET INFO DnsCrypt DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE UAC-0114/Winter Vivern Screenshot Upload M1 rev 2 2024-03-26
suricata ET INFO LibreDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Win32/MagicRAT CnC Activity M2 rev 2 2024-03-26
suricata ET MALWARE CopperStealer - Browser Stealer Exfil via Telegram rev 2 2024-03-26
suricata ET MALWARE Observed DNS Query to Pegasus Domain rev 3 2024-03-26
suricata ET INFO Usable Privacy DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO ffmuc DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO DNS For Family DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Konni Group CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE OSX/Proton.B Domain in SNI rev 6 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-09-14 rev 2 2024-03-26
suricata ET INFO TheRifleMan DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET GAMES Solaris2 Checkin rev 2 2024-03-26
suricata ET MALWARE Ghostwriter/UNC1151 Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING AlaskaUSA FCU Phish 2022-07-24 rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-10-26 rev 2 2024-03-26
suricata ET MALWARE MalDoc/Gamaredon CnC Activity M1 rev 2 2024-03-26
suricata ET MALWARE Dridex CnC Request - Spam/Worm Component rev 2 2024-03-26
suricata ET INFO CZ.NIC DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Edgy DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO FutaDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Successful IRS Credential Phish 2022-04-25 rev 3 2024-03-26
suricata ET INFO jp.tiar DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET PHISHING Generic Credential Phish Landing Page M2 2022-10-11 rev 2 2024-03-26
suricata ET DNS APT_NGO_wuaclt C2 Domain micorsofts.com rev 4 2024-03-26
suricata ET PHISHING Successful FedEx Phish 2022-07-20 rev 2 2024-03-26
suricata ET MALWARE Win32/PlugX Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE DazzleSpy Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING TMOBILE Successful Credential Phish 2022-11-01 rev 2 2024-03-26
suricata ET PHISHING Generic Korean Bank Credential Theft 2023-01-09 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO localhost .run TLS Certification Observed rev 2 2024-03-26
suricata ET PHISHING Successful Generic Credential Phish 2022-12-06 rev 2 2024-03-26
suricata ET MALWARE Octopus Backdoor Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Successful CargoBay Exfil rev 2 2024-03-26
suricata ET MALWARE lu0bot Loader HTTP Request M3 rev 2 2024-03-26