Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE Win32/Bisonal DNS Lookup 3 rev 4 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 15 rev 4 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 6 rev 4 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 1 rev 3 2020-09-16
suricata ET INFO External IP Address Lookup via iplocation.com rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 5 rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 30 rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 9 rev 4 2020-09-16
suricata ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup rev 4 2020-09-16
suricata ET MALWARE Observed DNS Query for MageCart Data Exfil Domain rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 18 rev 4 2020-09-16
suricata ET MALWARE DNSpionage Requesting Config rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 31 rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 27 rev 4 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 2 rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 24 rev 3 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 36 rev 4 2020-09-16
suricata ET MALWARE BrushaLoader CnC DNS Lookup rev 3 2020-09-16
suricata ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 4 rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 6 rev 3 2020-09-16
suricata ET MALWARE Sidewinder CnC DNS Query rev 3 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 40 rev 4 2020-09-16
suricata ET MALWARE TEMP.Periscope APT Domain in DNS Lookup rev 4 2020-09-16
suricata ET MOBILE_MALWARE NSO Related Domain 22 rev 4 2020-09-16
suricata ET MALWARE Win32/Dorv InfoStealer CnC DNS Query rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 19 rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 28 rev 3 2020-09-16
suricata ET MALWARE Python Monero Miner CnC DNS Query rev 3 2020-09-16
suricata ET WEB_SPECIFIC_APPS Online Trade - Information Disclosure rev 3 2020-09-16
suricata ET INFO HTTP POST Request to Suspicious *.gq domain rev 3 2020-09-16
suricata ET MALWARE APT DarkHydrus DNS Lookup 18 rev 3 2020-09-16
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup rev 4 2020-09-16