Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Simple Web Content Management System SQL Injection Attempt -- page.php id SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS Savas Guestbook SQL Injection Attempt -- add2.php website SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS Serendipity SQL Injection Attempt -- index.php serendipity UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php topic_id DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS dol storye SQL Injection Attempt -- dettaglio.asp id_aut UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-functions.php INSERT rev 6 2019-08-22
snort ET TROJAN MyKings Bootloader Variant Requesting Payload M3 rev 2 2019-08-21
snort ET TROJAN MyKings Bootloader Variant Requesting Payload M1 rev 2 2019-08-21
snort ET TROJAN MyKings Bootloader Variant Requesting Payload M2 rev 2 2019-08-21
snort ET TROJAN BalkanDoor CnC Checkin - Server Response rev 2 2019-08-20
snort ET TROJAN BalkanDoor CnC Checkin rev 2 2019-08-19
snort ET TROJAN Win32/Dostre CnC Activity rev 3 2019-08-19
snort ET TROJAN Amadey CnC Check-In rev 3 2019-08-19
snort ET WEB_SPECIFIC_APPS Jenkins Chained Exploits CVE-2018-1000861 and CVE-2019-1003000 M1 rev 3 2019-08-19
suricata ET MALWARE Win32/Dostre CnC Activity rev 3 2019-08-19
snort ET WEB_SERVER Webmin RCE CVE-2019-15107 rev 2 2019-08-18
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT DRIVEBY FakeSupport - URI - windows-firewall.png rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Scam Landing M2 2019-04-15 rev 3 2019-08-16
snort ET WEB_CLIENT Fake Flash Update Mar 23 rev 2 2019-08-16
snort ET WEB_CLIENT Generic Fake Support Phone Scam Mar 8 rev 2 2019-08-16
snort ET TROJAN Clipsa Stealer - Exfiltration Activity rev 2 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M4 rev 2 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing Apr 4 rev 2 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing 2017-07-26 rev 3 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M2 rev 2 2019-08-16
snort ET WEB_CLIENT Fake Windows Security Warning - png rev 2 2019-08-16
snort ET WEB_CLIENT Microsoft Tech Support Scam Landing M1 Oct 13 2017 rev 3 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing M1 Oct 16 2016 rev 3 2019-08-16
snort ET TROJAN [TGI] Py.Machete FTP Exfil 1 rev 4 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing 2017-07-26 rev 3 2019-08-16
snort ET WEB_CLIENT Fake Virus Phone Scam Landing Oct 19 M3 rev 2 2019-08-16
snort ET WEB_CLIENT Microsoft Tech Support Phone Scam M2 Jul 07 2017 rev 2 2019-08-16
snort ET TROJAN Clipsa Stealer - CnC Checkin rev 2 2019-08-16
snort ET WEB_CLIENT Fake Video Player Update Scam Oct 30 rev 2 2019-08-16
snort ET TROJAN Outbound POST Request with ps PowerShell Command Output rev 3 2019-08-16
snort ET WEB_CLIENT Microsoft Tech Support Phone Scam M4 Jul 07 2017 rev 2 2019-08-16