Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Generic Credential Phish 2022-03-02 rev 3 2022-04-18
suricata ET PHISHING Observed OWA Phishing Landing Page 2021-08-20 rev 2 2022-04-18
suricata ET PHISHING Paypal Phishing Landing Jun 28 2017 rev 5 2022-04-18
suricata ET PHISHING IRS Credential Phish Credit Card Payment Data Exfil rev 3 2022-04-18
suricata ET MALWARE Win32/Numando Banker CnC Activity rev 2 2022-04-18
suricata ET MALWARE MSIL/Crimson Rat CnC Server Response rev 2 2022-04-18
suricata ET MALWARE MSIL/Crimson Rat CnC Exfil rev 2 2022-04-18
suricata ET PHISHING Successful CSIS Credential Phish rev 2 2022-04-18
sigma Modifying Crontab test 2022-04-16
snort ET POLICY [TW] IPFS Protocol HTTP Headers Observed rev 2 2022-04-15
snort ET POLICY [TW] IPFS File Request Observed rev 1 2022-04-15
snort ET INFO Empty POST with Terse Headers Over Non Standard Port rev 2 2022-04-15
suricata ET INFO [TW] IPFS File Request Observed rev 1 2022-04-15
snort ET INFO DYNAMIC_DNS Query to a *.authorizeddns .net Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.fartit .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.lflink .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.moneyhome .biz Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.mrface .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.ikwb .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.jungleheart .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.gettrials .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.qpoe .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dnsfailover .net Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.edns .biz Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.itemdb .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.mynumber .org Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.mysecondarydns .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.itemdb .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.ocry .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.otzo .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.faqserv .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.mywww .biz Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.wikaba .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.youdontcare .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.onedumb .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.mynumber .org Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.sexidude .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.4dq .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.4pu .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.mypicture .info Domain rev 2 2022-04-14