Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Metyus Okul Yonetim Sistemi SQL Injection Attempt -- uye_giris_islem.asp sifre UNION SELECT rev 9 2020-09-03
suricata ET WEB_SPECIFIC_APPS Metyus Okul Yonetim Sistemi SQL Injection Attempt -- uye_giris_islem.asp kullanici_ismi UNION SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS digiSHOP cart.php UPDATE SET SQL Injection Attempt rev 4 2020-09-03
suricata ET WEB_SPECIFIC_APPS Metyus Okul Yonetim Sistemi SQL Injection Attempt -- uye_giris_islem.asp kullanici_ismi UPDATE rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS MidiCart ASP Shopping Cart and ASP Plus Shopping Cart SQL Injection Attempt -- item_show.asp id2006quant SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft INSERT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS WSN Guest SQL Injection Attempt -- comments.php id DELETE rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS Minerva mod SQL Injection Attempt -- forum.php c SELECT rev 8 2020-09-03
suricata ET INFO Imposter USPS Domain rev 5 2020-09-03
suricata ET WEB_SPECIFIC_APPS MidiCart ASP Shopping Cart and ASP Plus Shopping Cart SQL Injection Attempt -- item_show.asp id2006quant UNION SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key UPDATE rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS Metyus Okul Yonetim Sistemi SQL Injection Attempt -- uye_giris_islem.asp kullanici_ismi SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS OvBB admincp.php smilieid Parameter UPDATE SET SQL Injection Attempt rev 4 2020-09-03
suricata ET WEB_SPECIFIC_APPS MidiCart ASP Shopping Cart and ASP Plus Shopping Cart SQL Injection Attempt -- item_list.asp secondgroup SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS MidiCart ASP Shopping Cart and ASP Plus Shopping Cart SQL Injection Attempt -- item_list.asp maingroup SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user INSERT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS Messageriescripthp SQL Injection Attempt -- lire-avis.php aa DELETE rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS Jasmine CMS SQL Injection Attempt -- news.php item DELETE rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay UNION SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS GeekLog filemgt UNION SELECT SQL Injection Attempt rev 5 2020-09-03
suricata ET WEB_SPECIFIC_APPS PHP-Fusion mguser fotoalbum album_id Parameter INSERT INTO SQL Injection Attempt rev 4 2020-09-03
suricata ET WEB_SPECIFIC_APPS MiNT Haber Sistemi SQL Injection Attempt -- duyuru.asp id INSERT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS GeekLog filemgt SELECT FROM SQL Injection Attempt rev 4 2020-09-03
suricata ET WEB_SPECIFIC_APPS MidiCart ASP Shopping Cart and ASP Plus Shopping Cart SQL Injection Attempt -- item_show.asp id2006quant INSERT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS AJ Forum SQL Injection Attempt -- topic_title.php td_id DELETE rev 9 2020-09-03
suricata ET WEB_SPECIFIC_APPS MidiCart ASP Shopping Cart and ASP Plus Shopping Cart SQL Injection Attempt -- item_list.asp maingroup UNION SELECT rev 8 2020-09-03
suricata ET WEB_SPECIFIC_APPS Messageriescripthp SQL Injection Attempt -- lire-avis.php aa SELECT rev 8 2020-09-03
snort ET TROJAN Observed MageCart CnC Domain in TLS SNI rev 2 2020-09-02
snort ET TROJAN Lemon_Duck Linux Shell Script CnC Activity rev 2 2020-09-02
snort ET TROJAN TURLA APT CnC Activity rev 2 2020-09-02
snort ET MALWARE Win32/Xetapp Installer Checkin rev 2 2020-09-02
snort ET TROJAN Zyklon CnC Activity rev 2 2020-09-02
snort ET TROJAN Lemon_Duck CnC Activity rev 2 2020-09-02
snort ET TROJAN Observed IcedID CnC Domain in TLS SNI rev 2 2020-09-02
suricata ET MALWARE Win32.Small.AB or related Post-infection checkin rev 5 2020-09-02
suricata ET MALWARE Possible DeadlyKiss APT CnC Domain Observed in DNS Query rev 2 2020-09-02
suricata ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user SELECT rev 8 2020-09-02
suricata ET INFO Myspace Login Attempt rev 8 2020-09-02