Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Wordpress Myflash path parameter Local File Inclusion Attempt rev 1 2012-12-29
snort ET WEB_SPECIFIC_APPS Symantec Messaging Gateway 9.5.3-3 - Arbitrary file download 2 rev 2 2012-12-29
snort ET TROJAN W32/Downloader.FakeFlashPlayer Status.Php CnC Beacon rev 1 2012-12-29
snort ET ACTIVEX Possible Advantech Studio ISSymbol ActiveX Control Multiple Buffer Overflow Attempt rev 2 2012-12-29
snort ET CURRENT_EVENTS Unknown EK Landing Page rev 1 2012-12-28
snort ET CURRENT_EVENTS Hostile Gate landing seen with pamdql/Sweet Orange base64 rev 1 2012-12-28
snort ET MOBILE_MALWARE Android/Updtkiller Sending Device Information rev 1 2012-12-28
snort ET WEB_SPECIFIC_APPS WordPress WP-Property Plugin uploadify.php Arbitrary File Upload Vulnerability rev 1 2012-12-28
snort ET TROJAN W32/Dexter Infostealer CnC POST rev 2 2012-12-28
snort ET WEB_SPECIFIC_APPS Request to Wordpress W3TC Plug-in dbcache Directory rev 1 2012-12-28
snort ET TROJAN SmokeLoader - Init 0x rev 1 2012-12-22
snort ET WEB_SPECIFIC_APPS WordPress Cloudsafe365 file parameter Local File Inclusion Attempt rev 1 2012-12-21
snort ET WEB_SPECIFIC_APPS Amateur Photographer Image Gallery file parameter Local File Inclusion Attempt rev 1 2012-12-21
snort ET WEB_SPECIFIC_APPS simple machines forum include parameter Local File Inclusion Attempt rev 1 2012-12-21
snort ET POLICY poclbm BitCoin miner rev 1 2012-12-21
snort ET ACTIVEX Possible Cyme ChartFX client server ActiveX Control ShowPropertiesDialog arbitrary code execution rev 2 2012-12-21
snort ET TROJAN W32.Daws/Sanny CnC Initial Beacon rev 2 2012-12-18
snort ET ACTIVEX Possible NVIDIA Install Application ActiveX Control AddPackages Unicode Buffer Overflow rev 2 2012-12-14
snort ET WEB_SPECIFIC_APPS RIPS code.php Local File Inclusion Vulnerability rev 1 2012-12-14
snort ET TROJAN Faked Russian Opera UA without Accept - probable downloader rev 1 2012-12-14
snort ET WEB_SPECIFIC_APPS RIPS function.php Local File Inclusion Vulnerability rev 1 2012-12-14
snort ET WEB_SPECIFIC_APPS Manhali download.php Local File Inclusion Vulnerability rev 1 2012-12-14
snort ET EXPLOIT Metasploit -Java Atomic Exploit Downloaded rev 1 2012-12-13
snort ET WEB_CLIENT Possible Malvertising FlashPost - POST to *.stats rev 2 2012-12-13
snort ET TROJAN Win32/Necurs rev 1 2012-12-08
snort ET TROJAN SmokeBot grab data plaintext rev 3 2012-12-08
snort ET TROJAN Win32/Trojan.Agent.AXMO CnC Beacon rev 1 2012-12-08
snort ET WEB_SPECIFIC_APPS Achievo atknodetype parameter Local File Inclusion Vulnerability rev 2 2012-12-08
snort ET INFO MySQL Database Query Version OS compile rev 2 2012-12-06
snort ET ATTACK_RESPONSE MySQL User Account Enumeration rev 2 2012-12-06
snort ET CURRENT_EVENTS RedKit - Potential Payload Requested - /2Digit.html rev 1 2012-12-06
snort ET SCAN MYSQL MySQL Remote FAST Account Password Cracking rev 5 2012-12-05
snort ET CURRENT_EVENTS Zuponcic Hostile JavaScript rev 1 2012-12-04
snort ET CURRENT_EVENTS Unknown EK Landing URL rev 10 2012-11-30
snort ET TROJAN WORM_VOBFUS Checkin 1 rev 5 2012-11-30
snort ET TROJAN Lyposit Ransomware Checkin 2 rev 1 2012-11-29
snort ET SNMP Samsung Printer SNMP Hardcode RW Community String rev 2 2012-11-29
snort ET CURRENT_EVENTS CritXPack PDF Request rev 11 2012-11-29
snort ET WEB_SERVER PIWIK Backdoored Version calls home rev 3 2012-11-28
snort ET WEB_SPECIFIC_APPS Piwik Backdoor Access 2 rev 1 2012-11-28