Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Smanager CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE GCleaner Downloader Activity M4 rev 3 2024-03-25
suricata ET MALWARE Go/Hack Browser Data Exfil Attempt rev 3 2024-03-25
suricata ET MALWARE HabitsRAT Checkin rev 2 2024-03-25
suricata ET EXPLOIT_KIT Possible PurpleFox EK Framework URI Struct Payload Request M1 rev 3 2024-03-25
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE Observed Reimageplus Ransomware Domain in TLS SNI rev 2 2024-03-25
suricata ET MALWARE Smanager CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE Magecart/Skimmer - AngryBeaver Exfil Attempt rev 2 2024-03-25
suricata ET MALWARE Maldoc CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE Observed ELF/HabitsRAT CnC Domain in TLS SNI rev 2 2024-03-25
suricata ET MALWARE Win32/Backdoor.Dripion External IP Check rev 5 2024-03-25
suricata ET MALWARE Observed CobaltStrike CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE GCleaner Downloader Activity M2 rev 2 2024-03-25
suricata ET MALWARE TA455 Related CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MOBILE_MALWARE PHANTOMLANCE CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE FakeAvCn-A Checkin 1 rev 6 2024-03-25
suricata ET INFO Wifi Geolocation Lookup Attempt rev 2 2024-03-25
suricata ET MALWARE BAZAR CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE PoetRAT CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE Observed Unk.PowerShell Loader CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE Observed ELF/HabitsRAT CnC Domain in TLS SNI rev 2 2024-03-25
suricata ET MALWARE Observed DNS Query to Vicious Panda CnC Domain rev 3 2024-03-25
suricata ET MALWARE Fake ProtonVPN/AZORult CnC Domain Query rev 3 2024-03-25
suricata ET MALWARE W32/StealRat.SpamBot Email Template Request rev 5 2024-03-25
suricata ET MALWARE Observed DNS Query to WHO Themed Malware Delivery Domain rev 4 2024-03-25
suricata ET MALWARE Magecart CnC Domain Observed in DNS Query rev 5 2024-03-25
suricata ET MALWARE Observed ELF/HabitsRAT CnC Domain in TLS SNI rev 2 2024-03-25
suricata ET MALWARE Zeus.Downloader Campaign Unknown Initial CnC Beacon rev 7 2024-03-25
suricata ET MALWARE Unknown Chinese Threat Actor CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE Observed OSX/Silver Sparrow Download Domain in TLS SNI rev 2 2024-03-25
suricata ET MALWARE ComRAT CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE PlugX DNS Lookup rev 2 2024-03-25
suricata ET MOBILE_MALWARE PHANTOMLANCE CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE TA455 Related CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET INFO Unix/Linux Processhider Source Being Downloaded rev 2 2024-03-25
suricata ET MALWARE Linux DarkRadiation Ransomware Activity Attack Check rev 2 2024-03-25
suricata ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 3 2024-03-25