Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MALWARE Possible DarkFinger tasklist Retrieval attempt rev 1 2023-06-22
suricata ET MALWARE Possible DarkFinger Payload Retrieval Attempt - nc10 rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MALWARE Win32/RedEnergy System Information Retrieval Attempt rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MALWARE Possible DarkFinger ipconfig Retrieval Attempt rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET PHISHING Generic Obfuscated Sign In Landing Page 2023-06-22 rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MALWARE Possible DarkFinger Payload Retrieval Attempt - ps10 rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-22
elastic Potential SSH Brute Force Detected on Privileged Account deprecated 2023-06-22
sigma Potential Persistence Via Microsoft Office Startup Folder test 2023-06-22
sigma Suspicious Word Cab File Write CVE-2021-40444 test 2023-06-22
sigma Remote Access Tool Services Have Been Installed - System test 2023-06-22
snort ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-21
snort ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-21
snort ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 1 2023-06-21