Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE JS Skimmer Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE SparklingGoblin/Winnti Group SideWalk Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE Possible FoggyWeb Backdoor Server Response rev 3 2024-03-25
suricata ET MOBILE_MALWARE ITW Android Post-Exploit Downloader CnC Activity rev 3 2024-03-25
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE BAZAR CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE Buer Loader Successful Payload Download rev 4 2024-03-25
suricata ET MALWARE Observed DNS Query to Stitch C2 Domain rev 3 2024-03-25
suricata ET MALWARE lu0bot CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE Possible Generic RAT over Telegram API rev 3 2024-03-25
suricata ET MALWARE Remcos Builder License Check rev 3 2024-03-25
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE Lunar Builder Exfil Response rev 3 2024-03-25
suricata ET MALWARE Query for Known Hostile *test.3322.org.cn Domain rev 2 2024-03-25
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE TA455 Related CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE MICROPSIA CnC Checkin M2 rev 2 2024-03-25
suricata ET MALWARE lu0bot CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE Possible SQUIRRELWAFFLE Server Response rev 3 2024-03-25
suricata ET HUNTING Suspicious Request to iplogger .org Contains Period rev 3 2024-03-25
suricata ET MALWARE Linux DarkRadiation Ransomware Activity Attack Check rev 2 2024-03-25
suricata ET INFO Unix/Linux Processhider Source Being Downloaded rev 2 2024-03-25
suricata ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE TA455 CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MOBILE_MALWARE Phenakite Audio Upload CnC rev 3 2024-03-25
suricata ET MALWARE Observed DarkSide Ransomware CnC Domain in TLS SNI rev 2 2024-03-25
suricata ET MALWARE Win32/MysterySnail RAT CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE DarkIRC Bot CnC Domain Lookup rev 2 2024-03-25
suricata ET WEB_CLIENT Exchange Webshell CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE Smanager CnC Domain in DNS Lookup rev 2 2024-03-25
suricata ET MALWARE MINEBRIDGE CnC Activity rev 3 2024-03-25
suricata ET MALWARE Observed Unk.PowerShell Loader CnC Domain in TLS SNI rev 3 2024-03-25
suricata ET MALWARE IXWARE Stealer Domain in DNS Lookup rev 3 2024-03-25
suricata ET INFO Microsoft Netconnection Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE ASNAROK Related Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE VenusLocker Associated User-Agent Activity rev 2 2024-03-25
suricata ET MALWARE Observed DNS Query to Blackrota Domain rev 3 2024-03-25
suricata ET MALWARE POWERTON CnC Domain in DNS Lookup rev 3 2024-03-25
suricata ET MALWARE APT28/SkinnyBoy Payload Request rev 2 2024-03-25
suricata ET ADWARE_PUP SuperAntiSpyware Install Checkin rev 2 2024-03-25