Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO HTTP POST Request to Suspicious *.icu domain rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 22 rev 3 2020-09-16
suricata ET WEB_SPECIFIC_APPS Blind Server-Side Request Forgery rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 10 rev 3 2020-09-16
suricata ET MALWARE JS.InfectedMikrotik Injects Domain Observed in DNS Lookup rev 4 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 35 rev 4 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 4 rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 17 rev 4 2020-09-16
suricata ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 25 rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 11 rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 1 rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 19 rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 28 rev 3 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 15 rev 4 2020-09-16
suricata ET MALWARE PS/PowerRatankba CnC DNS Lookup rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 4 rev 3 2020-09-16
suricata ET WEB_SPECIFIC_APPS ShopNx - Arbitrary File Upload rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 10 rev 4 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE FIN6 StealerOne CnC DNS Query rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MOBILE_MALWARE Android.Trojan.Marcher.U DNS Lookup rev 4 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 2 rev 3 2020-09-16
suricata ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 3 rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 26 rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET HUNTING Suspicious Malformed Double Accept Header rev 18 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 3 rev 4 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 14 rev 4 2020-09-16
suricata ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup rev 4 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 9 rev 4 2020-09-16
suricata ET MALWARE W32.Razy Inject Domain in DNS Lookup rev 4 2020-09-16