Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Koobface Trojan HTTP Post Checkin rev 8 2020-04-21
suricata ET MALWARE RegHelper Installation rev 6 2020-04-21
suricata ET MALWARE OSX/Flashback.K/I reporting successful infection rev 5 2020-04-21
suricata ET MALWARE Carberp checkin task rev 8 2020-04-21
suricata ET WEB_SERVER /bin/csh In URI Possible Shell Command Execution Attempt rev 5 2020-04-21
suricata ET USER_AGENTS Atomic_Email_Hunter User-Agent Inbound rev 5 2020-04-21
suricata ET MALWARE Win32/Chekafe.A or Related Infection Checkin rev 6 2020-04-21
suricata ET MALWARE Gozi check-in / update rev 6 2020-04-21
suricata ET MALWARE Cycbot POST rev 4 2020-04-21
suricata ET INFO File Being Uploaded to SendSpace File Hosting Site rev 3 2020-04-21
suricata ET MALWARE Downloader.Win32.Banload Reporting rev 5 2020-04-21
suricata ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter UNION SELECT SQL Injection Attempt rev 4 2020-04-21
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-20
snort ET TROJAN Targeted Activity - CnC Domain in SNI rev 2 2020-04-20
suricata ET INFO Google Music Streaming rev 7 2020-04-20
suricata ET WEB_SPECIFIC_APPS KLINK txtCodiInfo parameter SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET INFO HTTP Request to a *.dlinkddns.com domain rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Immophp annonce parameter UPDATE SET SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Wordpress plugin Flash Album Gallery pid Parameter UPDATE SET SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS jbShop e107 CMS plugin item_id parameter DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script UNION SELECT SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible ogg Remote File Inclusion Attempt rev 5 2020-04-20
suricata ET MALWARE FakeAV Landing Page rev 5 2020-04-20
suricata ET INFO ICP Email Send via HTTP - Often Trojan Install Reports rev 5 2020-04-20
suricata ET WEB_SERVER PHP Possible ftps Local File Inclusion Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS phpRS id parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible expect Remote File Inclusion Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS KLINK txtCodiInfo parameter DELETE FROM SQL Injection Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Component com_hello UNION SELECT SQL Injection Attempt rev 3 2020-04-20
suricata ET MALWARE Win32/FakeSysdef Rogue AV Checkin rev 10 2020-04-20
suricata ET WEB_SPECIFIC_APPS SoftMP3 search Parameter DELETE FROM SQL Injection Attempt rev 5 2020-04-20
suricata ET MALWARE W32.Qakbot Request for Compromised FTP Sites rev 3 2020-04-20
suricata ET MOBILE_MALWARE Android/Ozotshielder.A Checkin rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla techfolio component SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Wordpress plugin Flash Album Gallery pid Parameter DELETE FROM SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter UNION SELECT SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Wordpress plugin Flash Album Gallery pid Parameter INSERT INTO SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS WordPress DB XML dump attempted access rev 3 2020-04-20