Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Shylock Module Data POST rev 3 2012-09-28
snort ET POLICY Kindle Fire Browser User-Agent Outbound rev 2 2012-09-28
snort ET WEB_SPECIFIC_APPS Wordpress Plugin Is-human type Parameter Remote Code Execution Attempt rev 2 2012-09-28
snort ET WEB_SPECIFIC_APPS Possible JBoss/JMX InvokerServlet Auth Bypass Attempt rev 2 2012-09-28
snort ET WEB_SPECIFIC_APPS WebC.be Fichier_a_telecharger Parameter Local File Disclosure Attempt rev 2 2012-09-28
snort ET TROJAN Win32.Hupigon.dkwt Related Checkin rev 8 2012-09-27
snort ET TROJAN Murlo Trojan Checkin rev 9 2012-09-27
snort ET TROJAN Densmail.com Related Trojan Checkin rev 4 2012-09-27
snort ET TROJAN Gamania Trojan Check-in rev 9 2012-09-27
snort ET WEB_SPECIFIC_APPS Simploo CMS x parameter Remote PHP Code Execution Attempt rev 3 2012-09-27
snort ET WEB_SPECIFIC_APPS Cyphor show.php SQL injection attempt rev 7 2012-09-27
snort ET WEB_SPECIFIC_APPS Coppermine Photo Gallery retva Parameter Remote Command Execution Attempt rev 3 2012-09-27
snort ET WEB_SPECIFIC_APPS Slooze Web Photo Album file Parameter Command Execution Attempt rev 2 2012-09-27
snort ET WEB_SPECIFIC_APPS Coppermine Photo Gallery output Parameter Remote Command Execution Attempt rev 3 2012-09-27
snort ET TROJAN Backdoor.Win32.Fynloski.A/DarkRat Checkin Outbound rev 8 2012-09-27
snort ET TROJAN Oficla Downloader Activity Observed rev 8 2012-09-27
snort ET TROJAN Win32.Runner/Bublik Checkin rev 6 2012-09-26
snort ET WEB_CLIENT Obfuscated Javascript // ptth rev 3 2012-09-26
snort ET TROJAN VirTool.Win32/VBInject.gen!DM Checkin rev 8 2012-09-26
snort ET POLICY GNU/Linux APT User-Agent Outbound likely related to package management rev 3 2012-09-26
snort ET CURRENT_EVENTS Sakura exploit kit exploit download request /nano.php rev 1 2012-09-25
snort ET WEB_SERVER Wordpress Login Bruteforcing Detected rev 3 2012-09-20
snort ET TROJAN UPDATE Protocol Trojan Communication detected on http ports 2 rev 4 2012-09-19
snort ET TROJAN Mirage Campaign checkin rev 1 2012-09-19
snort ET INFO JAVA - document.createElement applet rev 1 2012-09-18
snort ET SCAN Brutus Scan Outbound rev 1 2012-09-17
snort ET WEB_SERVER Brutus Scan Inbound rev 1 2012-09-17
snort GPL RPC portmap rexd request UDP rev 9 2012-09-14
snort GPL RPC portmap amountd request UDP rev 9 2012-09-14
snort GPL RPC portmap bootparam request UDP rev 14 2012-09-14
snort GPL RPC portmap selection_svc request UDP rev 9 2012-09-14
snort GPL SQL xp_cmdshell program execution rev 7 2012-09-14
snort GPL RPC portmap rstatd request UDP rev 10 2012-09-14
snort GPL RPC portmap rusers request UDP rev 12 2012-09-14
snort GPL RPC portmap mountd request UDP rev 9 2012-09-14
snort GPL TFTP GET Admin.dll rev 5 2012-09-14
snort GPL RPC portmap admind request UDP rev 9 2012-09-14
snort GPL TFTP GET nc.exe rev 5 2012-09-14
snort GPL RPC portmap ttdbserv request UDP rev 18 2012-09-14
snort GPL RPC portmap pcnfsd request UDP rev 10 2012-09-14