Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO DYNAMIC_DNS HTTP Request to a *.isa-geek .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.ishevchenko .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.is-into-anime .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.ohbah .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.from-mt .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.ruok .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.robinhud .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.euasazic .ro Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.isageek .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.myjamesonline .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.sportseducationinstructors .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.is-an-artist .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.is-a-cpa .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.v6 .navy Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.chaseinator .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.gruppuso .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.rogerthedog .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.novohorizonte .pt Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.mooo .info Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.sammah .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.cw03 .ru Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.from-ms .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.prs7 .org Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.multiverso .info Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.yihtah .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.18t .biz Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.gparente .net .br Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.make .com .ar Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.normaweese .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.chickenkiller .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.champagnewishesandrvdreams .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.lai .ac Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.battlecore .ru Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.darvin .one .pl Domain rev 2 2023-03-02
snort ET MALWARE Win32/Presenoker Checkin rev 1 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.is-a-blogger .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.merrittcredit .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS Query to a *.dogdammit .com Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.kirelli .net Domain rev 2 2023-03-02
snort ET INFO DYNAMIC_DNS HTTP Request to a *.coolfire25 .com Domain rev 2 2023-03-02