Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS SoftMP3 search Parameter UPDATE SET SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SERVER PHP Possible phar Remote File Inclusion Attempt rev 6 2020-04-20
suricata ET MOBILE_MALWARE Android.YzhcSms URL for Possible File Download rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS phpRS id parameter SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter DELETE FROM SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla com_dshop Component SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS phpRS id parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PUT Website Defacement Attempt rev 3 2020-04-20
suricata ET MALWARE W32/Nolja Trojan Downloader Initial Checkin rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Wordpress plugin Flash Album Gallery pid Parameter UNION SELECT SQL Injection Attempt rev 3 2020-04-20
suricata ET MALWARE Smokeloader getsock Command rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter SELECT FROM SQL Injection Attempt rev 3 2020-04-20
suricata ET MALWARE Smokeloader getload Command rev 4 2020-04-20
suricata ET MALWARE Gozi Communication 2 rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS jbShop e107 CMS plugin item_id parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible data Remote File Inclusion Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo AHS Shop component DELETE FROM SQL Injection Attempt rev 6 2020-04-20
suricata ET WEB_CLIENT Microsoft Visio 2003 mfc71enu.dll DLL Loading Arbitrary Code Execution Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo N-Myndir INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET HUNTING Suspicious HTTP Request for gift.exe rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET MOBILE_MALWARE Android.AdSms Retrieving XML File from CnC Server rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS Zabbix popup.php UPDATE SET SQL Injection Vulnerability rev 4 2020-04-20
suricata ET MOBILE_MALWARE Android/KungFu Package Delete Command rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS SoftMP3 search Parameter SELECT FROM SQL Injection Attempt rev 3 2020-04-20
suricata ET MOBILE_MALWARE SslCrypt Server Communication rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS jbShop e107 CMS plugin item_id parameter UNION SELECT SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Zabbix popup.php UNION SELECT SQL Injection Vulnerability rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script SELECT FROM SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Component com_hello UNION SELECT SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo Zorder zorder Parameter UPDATE SET SQL Injection Vulnerability rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible rar Remote File Inclusion Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS SoftMP3 search Parameter UNION SELECT SQL Injection Attempt rev 5 2020-04-20
suricata ET MALWARE Win32/FakeSysdef Rogue AV Checkin rev 10 2020-04-20
suricata ET WEB_SPECIFIC_APPS Immophp annonce parameter UNION SELECT SQL Injection Attempt rev 3 2020-04-20
suricata ET MOBILE_MALWARE Android/SndApp.B Sending Device Information rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script UPDATE SET SQL Injection Attempt rev 4 2020-04-20