Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Zabbix popup.php UPDATE SET SQL Injection Vulnerability rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Wordpress plugin Flash Album Gallery pid Parameter UNION SELECT SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SERVER PUT Website Defacement Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET HUNTING Suspicious HTTP Request for gift.exe rev 3 2020-04-20
suricata ET MALWARE Gozi Communication 2 rev 3 2020-04-20
suricata ET MALWARE W32/Nolja Trojan Downloader Initial Checkin rev 3 2020-04-20
suricata ET MALWARE Smokeloader getload Command rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla com_dshop Component SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_CLIENT Microsoft Visio 2003 mfc71enu.dll DLL Loading Arbitrary Code Execution Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla com_dshop Component UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET MALWARE Smokeloader getsock Command rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS phpRS id parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible data Remote File Inclusion Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS jbShop e107 CMS plugin item_id parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible rar Remote File Inclusion Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script INSERT INTO SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Community component userid parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Component com_hello UNION SELECT SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET SCAN SQLix SQL Injection Vector Scan rev 7 2020-04-20
suricata ET MOBILE_MALWARE Android.Tonclank JAR File Download rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Component com_hello UPDATE SET SQL Injection Attempt rev 3 2020-04-20
suricata ET MALWARE Smokeloader getgrab Command rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET MOBILE_MALWARE Android/KungFu Package Delete Command rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS SoftMP3 search Parameter UNION SELECT SQL Injection Attempt rev 5 2020-04-20
suricata ET MOBILE_MALWARE SslCrypt Server Communication rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible ssh2 Remote File Inclusion Attempt rev 5 2020-04-20
suricata ET MALWARE Win32.Genome Initial Checkin rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo Zorder zorder Parameter UPDATE SET SQL Injection Vulnerability rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Community component userid parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS SoftMP3 search Parameter SELECT FROM SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Community component userid parameter DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo N-Myndir DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible ftps Local File Inclusion Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS KLINK txtCodiInfo parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20