Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL TFTP GET Admin.dll rev 5 2012-09-14
snort GPL RPC portmap amountd request UDP rev 9 2012-09-14
snort GPL TFTP GET nc.exe rev 5 2012-09-14
snort GPL RPC portmap mountd request UDP rev 9 2012-09-14
snort GPL RPC portmap ttdbserv request UDP rev 18 2012-09-14
snort GPL RPC portmap rstatd request UDP rev 10 2012-09-14
snort GPL RPC portmap snmpXdmi request UDP rev 15 2012-09-14
snort GPL RPC portmap status request UDP rev 9 2012-09-14
snort GPL SQL service_name buffer overflow attempt rev 3 2012-09-13
snort GPL IMAP Overflow Attempt rev 8 2012-09-13
snort GPL IMAP subscribe overflow attempt rev 2 2012-09-12
snort GPL WEB_SERVER service.cnf access rev 11 2012-09-12
snort GPL SQL Oracle iSQLPlus login.uix username overflow attempt rev 4 2012-09-12
snort GPL IMAP unsubscribe overflow attempt rev 2 2012-09-12
snort GPL WEB_SERVER writeto.cnf access rev 11 2012-09-12
snort GPL SQL MSSQL shellcode attempt 2 rev 7 2012-09-12
snort GPL NETBIOS SMB Session Setup AndX request username overflow attempt rev 5 2012-09-12
snort GPL NETBIOS xp_reg* - registry access rev 11 2012-09-12
snort GPL WEB_SERVER viewcode access rev 11 2012-09-12
snort GPL TELNET root login rev 9 2012-09-12
snort GPL IMAP status overflow attempt rev 3 2012-09-12
snort GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt rev 11 2012-09-12
snort GPL NETBIOS xp_reg* registry access rev 12 2012-09-12
snort GPL SQL shellcode attempt rev 7 2012-09-12
snort GPL NETBIOS SMB-DS DCEPRC ORPCThis request flood attempt rev 9 2012-09-12
snort GPL SQL sp_adduser - database user creation rev 6 2012-09-12
snort GPL TFTP GET shadow rev 5 2012-09-12
snort GPL SQL sp_password - password change rev 6 2012-09-12
snort GPL NETBIOS SMB-DS DCERPC ISystemActivator unicode bind attempt rev 8 2012-09-12
snort GPL NETBIOS SMB-DS Session Setup AndX request username overflow attempt rev 6 2012-09-12
snort GPL SQL sp_password password change rev 7 2012-09-12
snort GPL WEB_SERVER /scripts/iisadmin/default.htm access rev 9 2012-09-12
snort GPL IMAP unsubscribe literal overflow attempt rev 3 2012-09-12
snort GPL IMAP delete overflow attempt rev 2 2012-09-12
snort GPL WEB_SERVER global.asa access rev 14 2012-09-12
snort GPL SQL xp_printstatements possible buffer overflow rev 10 2012-09-12
snort GPL EXPLOIT site/iisamples access rev 10 2012-09-12
snort GPL WEB_SERVER services.cnf access rev 11 2012-09-12
snort GPL WEB_SERVER authors.pwd access rev 12 2012-09-12
snort GPL SQL sa login failed rev 10 2012-09-12