Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL RPC rlogin LinuxNIS rev 7 2012-08-21
snort GPL POP3 x86 SCO overflow rev 11 2012-08-21
snort GPL SHELLCODE HP-UX NOOP rev 9 2012-08-21
snort GPL RPC portmap yppasswd request UDP rev 9 2012-08-21
snort GPL RPC portmap sadmind request UDP rev 8 2012-08-21
snort GPL SHELLCODE SGI NOOP rev 7 2012-08-21
snort GPL RPC portmap ypserv request UDP rev 13 2012-08-21
snort GPL SHELLCODE sparc setuid 0 rev 8 2012-08-21
snort GPL RPC portmap snmpXdmi request TCP rev 19 2012-08-21
snort GPL RPC rlogin login failure rev 7 2012-08-21
snort GPL SHELLCODE Digital UNIX NOOP rev 8 2012-08-21
snort GPL TELNET TELNET login failed rev 11 2012-08-21
snort GPL SHELLCODE sparc NOOP rev 7 2012-08-21
snort GPL RPC portmap ypupdated request TCP rev 11 2012-08-21
snort GPL RPC snmpXdmi overflow attempt TCP rev 15 2012-08-21
snort GPL SHELLCODE Linux shellcode rev 11 2012-08-21
snort GPL SHELLCODE HP-UX NOOP rev 8 2012-08-21
snort GPL SHELLCODE sparc NOOP rev 7 2012-08-21
snort GPL RPC portmap espd request TCP rev 17 2012-08-21
snort GPL POP3 x86 Linux overflow rev 8 2012-08-21
snort ET WEB_SPECIFIC_APPS Joomla com_g2bridge controller parameter Local File Inclusion Attempt rev 3 2012-08-20
snort ET WEB_SPECIFIC_APPS MindTouch Deki Wiki deki_plugin.php Local File Inclusion Attempt rev 2 2012-08-20
snort ET POLICY libwww-perl User-Agent rev 2 2012-08-20
snort ET WEB_SPECIFIC_APPS MindTouch Deki Wiki link.php Local File Inclusion Attempt rev 2 2012-08-20
snort ET WEB_SPECIFIC_APPS MindTouch Deki Wiki wgDekiPluginPath parameter Local File Inclusion Attempt rev 2 2012-08-20
snort ET USER_AGENTS Suspicious User-Agent SimpleClient 1.0 rev 3 2012-08-17
snort ET TROJAN Farfli HTTP Checkin Activity rev 6 2012-08-17
snort ET TROJAN Urlzone/Bebloh/Bublik Checkin /was/uid.php rev 1 2012-08-14
snort ET CURRENT_EVENTS DRIVEBY SPL - Landing Page Received rev 2 2012-08-13
snort ET WEB_SPECIFIC_APPS dirLIST show_scaled_image.php Local File Inclusion Attempt rev 1 2012-08-10
snort ET CURRENT_EVENTS DRIVEBY SPL - Java Exploit Requested - /spl_data/ rev 1 2012-08-10
snort ET WEB_SPECIFIC_APPS dirLIST thumb_gen.php Local File Inclusion Attempt rev 1 2012-08-10
snort ET ACTIVEX Possible HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution 2 rev 2 2012-08-10
snort ET WEB_SPECIFIC_APPS Joomla je-media-player view parameter Local File Inclusion Attempt rev 1 2012-08-10
snort ET ACTIVEX Possible HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution rev 2 2012-08-10
snort ET CURRENT_EVENTS Sutra TDS /simmetry rev 1 2012-08-09
snort ET TROJAN FinFisher Malware Connection Handshake rev 2 2012-08-09
snort ET POLICY Suspicious Windows Executable WriteProcessMemory rev 1 2012-08-08
snort ET POLICY Suspicious Windows Executable CreateRemoteThread rev 1 2012-08-08
snort ET ACTIVEX Possible BarCodeWiz BarcodeWiz.dll ActiveX Control Barcode Method Remote Buffer Overflow Attempt rev 2 2012-08-07