Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET ACTIVEX Possible SkinCrafter ActiveX Control InitLicenKeys Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Possible Chilkat Software FTP2 ActiveX Component GetFile Access Remote Code Execution rev 4 2013-07-26
snort ET ACTIVEX Possible LEADTOOLS ActiveX Raster Twain AppName Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Possible NET-i viewer ActiveX Control BackupToAvi Method Access Buffer Overflow 2 rev 5 2013-07-26
snort ET ACTIVEX Possible SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control Install3rdPartyComponent Method Buffer Overflow rev 3 2013-07-26
snort ET ACTIVEX Possible Windows Live Writer ActiveX BlogThisLink Method Access Denail of Service Attack rev 4 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdSave Method Access Buffer Overflow 2 rev 4 2013-07-26
snort ET ACTIVEX Possible Chilkat Software FTP2 ActiveX Component GetFile Access Remote Code Execution 2 rev 4 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdOpen Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Possible Windows Live Writer ActiveX BlogThisLink Method Access Denail of Service Attack 2 rev 4 2013-07-26
snort ET INFO JNLP embedded file rev 2 2013-07-26
snort ET ACTIVEX Possible IBM Lotus Quickr for Domino ActiveX control Import_Times Method Access buffer overflow Attempt rev 4 2013-07-26
snort ET ACTIVEX Possible NET-i viewer ActiveX Control BackupToAvi Method Access Buffer Overflow rev 6 2013-07-26
snort ET ACTIVEX Possible LEADTOOLS ActiveX Raster Twain AppName Method Access Buffer Overflow rev 3 2013-07-26
snort ET ACTIVEX Possible NET-i viewer ActiveX Control ConnectDDNS Method Access Code Execution Vulnerability 2 rev 5 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdExport Method Access Buffer Overflow rev 2 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdExport Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Possible NET-i viewer ActiveX Control ConnectDDNS Method Access Code Execution Vulnerability rev 5 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdImport Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdSave Method Access Buffer Overflow rev 3 2013-07-26
snort ET TROJAN Pony Loader default URI struct rev 3 2013-07-25
snort ET WEB_CLIENT JS Browser Based Ransomware rev 1 2013-07-19
snort ET SCAN SipCLI VOIP Scan rev 2 2013-07-18
snort ET POLICY Android.Plankton/Tonclank Successful Installation Device Information POST Message Body rev 3 2013-07-17
snort ET MOBILE_MALWARE signed-unsigned integer mismatch code-verification bypass rev 1 2013-07-17
snort ET SCAN SipCLI VOIP Scan - TCP rev 1 2013-07-17
snort ET ATTACK_RESPONSE Non-Local Burp Proxy Error rev 1 2013-07-16
snort ET TROJAN Cryptmen FakAV page Title rev 1 2013-07-13
snort ET CHAT IRC USER Likely bot with 0 0 colon checkin rev 1 2013-07-13
snort ET CHAT IRC USER Off-port Likely bot with 0 0 colon checkin rev 1 2013-07-13
snort ET CURRENT_EVENTS DRIVEBY Redirection - Wordpress Injection rev 1 2013-07-09
snort ET CURRENT_EVENTS Cool Exploit Kit Plugin-Detect July 08 2013 rev 1 2013-07-09
snort ET TROJAN VBulletin Backdoor CMD inbound rev 3 2013-07-05
snort ET TROJAN VBulletin Backdoor C2 URI Structure rev 3 2013-07-05
snort ET CURRENT_EVENTS Lucky7 EK Landing Encoded Plugin-Detect rev 1 2013-07-04
snort ET EXPLOIT IPMI Cipher 0 Authentication mode set rev 3 2013-07-04
snort ET CURRENT_EVENTS Unknown Malvertising Exploit Kit Hostile Jar app.jar rev 3 2013-07-04
snort ET WEB_SERVER WebShell - GODSpy - Cookie rev 1 2013-07-02
snort ET WEB_SERVER WebShell - GODSPy - Auth Creds rev 1 2013-07-02
snort ET WEB_SERVER WebShell - Pouya - Pouya_Server Shell rev 1 2013-07-02