Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Trojan-Ransom.AndroidOS.Agent.bi CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Dridex CnC Request - Spam/Worm Component rev 2 2024-03-26
suricata ET MALWARE Win32/Trickbot Data Exfiltration M2 rev 3 2024-03-26
suricata ET INFO Blokada DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
sigma New Root Certificate Authority Added test 2024-03-26
sigma Certificate-Based Authentication Enabled test 2024-03-26
sigma Creation Of Pod In System Namespace test 2024-03-26
sigma Register New IFiltre For Persistence test 2024-03-26
sigma Kubernetes Events Deleted test 2024-03-26
sigma Deployment Deleted From Kubernetes Cluster test 2024-03-26
sigma Potential Remote Command Execution In Pod Container test 2024-03-26
sigma Container With A hostPath Mount Created test 2024-03-26
sigma Potential Sidecar Injection Into Running Deployment test 2024-03-26
sigma New Kubernetes Service Account Created test 2024-03-26
sigma Kubernetes Secrets Enumeration test 2024-03-26
sigma RBAC Permission Enumeration Attempt test 2024-03-26
sigma Privileged Container Deployed test 2024-03-26
sigma Displaying Hidden Files Feature Disabled test 2024-03-26
sigma New TimeProviders Registered With Uncommon DLL Name test 2024-03-26
snort ET TROJAN Known Hostile Domain citi-bank.ru Lookup rev 5 2024-03-25
snort ET EXPLOIT Possible Uniview IPC2322lb updatecpld Restricted Shell Bypass Attempt rev 1 2024-03-25
suricata ET MALWARE IXWARE Stealer Domain in DNS Lookup rev 3 2024-03-25
suricata ET ADWARE_PUP Win32/Adware.Agent.NSU CnC Activity M2 rev 2 2024-03-25
suricata ET MALWARE GCleaner Downloader Activity M3 rev 4 2024-03-25
suricata ET MOBILE_MALWARE ITW Android Post-Exploit Downloader CnC Activity rev 3 2024-03-25
suricata ET MALWARE Observed DNS Query to Vicious Panda CnC Domain rev 3 2024-03-25
suricata ET MALWARE Win32/PSW.Agent.OMP Variant CnC Activity rev 2 2024-03-25
suricata ET MALWARE Known Hostile Domain citi-bank.ru Lookup rev 5 2024-03-25
suricata ET ADWARE_PUP Win32/TrojanDownloader.Agent.BXA CnC Activity rev 2 2024-03-25
suricata ET MALWARE Observed ELF/HabitsRAT CnC Domain in TLS SNI rev 2 2024-03-25
suricata ET MALWARE PlugX DNS Lookup rev 2 2024-03-25
suricata ET MALWARE BAZAR CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET HUNTING Suspicious Use of rzd URL Shortener Service rev 2 2024-03-25
suricata ET MALWARE JS Skimmer Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE Thallium CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE Observed DNS Query to Stitch C2 Domain rev 3 2024-03-25
suricata ET MALWARE Observed CobaltStrike CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE Spark Backdoor CnC Domain Query rev 3 2024-03-25
suricata ET MALWARE MINEBRIDGE CnC Activity rev 3 2024-03-25
suricata ET MALWARE BAZAR CnC Domain in DNS Lookup rev 3 2024-03-25