Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET ACTIVEX Possible BarCodeWiz BarcodeWiz.dll ActiveX Control Barcode Method Remote Buffer Overflow Attempt rev 2 2012-08-07
snort ET TROJAN W32/Lile.A DoS Outbound rev 4 2012-08-07
snort ET ACTIVEX Possible AOL ICQ ActiveX Control DownloadAgent Method Access Arbitrary File Download and Execute 2 rev 2 2012-08-03
snort ET TROJAN Trojan.Win32.Jorik.Totem.vg HTTP request rev 1 2012-08-03
snort ET WEB_SPECIFIC_APPS Joomla Bsadv controller parameter Local File Inclusion Attempt rev 1 2012-08-03
snort ET WEB_SPECIFIC_APPS Joomla com_mailchimpccnewsletter controller parameter Local File Inclusion Attempt rev 1 2012-08-03
snort ET WEB_SPECIFIC_APPS Joomla com_jeformcr view parameter Local File Inclusion Attempt rev 1 2012-08-03
snort ET ACTIVEX Possible AOL ICQ ActiveX Control DownloadAgent Method Access Arbitrary File Download and Execute rev 2 2012-08-03
snort GPL SCAN ssh-research-scanner rev 6 2012-08-01
snort ET TROJAN Perfect Keylogger Install Email Report rev 8 2012-08-01
snort GPL SCAN nessus 1.X 404 probe rev 10 2012-08-01
snort ET SCAN HTExploit Method rev 1 2012-07-31
snort GPL FTP RETR overflow attempt rev 8 2012-07-30
snort GPL FTP STOU overflow attempt rev 5 2012-07-30
snort GPL MISC rsh froot rev 6 2012-07-30
snort GPL MISC UPnP Location overflow rev 14 2012-07-30
snort GPL MISC UPnP malformed advertisement rev 9 2012-07-30
snort GPL P2P GNUTella client request rev 7 2012-07-30
snort GPL FTP invalid MDTM command attempt rev 7 2012-07-30
snort GPL MISC rlogin bin rev 6 2012-07-30
snort GPL FTP passwd retrieval attempt rev 6 2012-07-30
snort GPL FTP CWD ~root attempt rev 11 2012-07-30
snort GPL FTP NLST overflow attempt rev 7 2012-07-30
snort GPL FTP XMKD overflow attempt rev 5 2012-07-30
snort GPL SNMP private access tcp rev 12 2012-07-30
snort GPL MISC rsh echo + + rev 6 2012-07-30
snort GPL FTP RNFR overflow attempt rev 2 2012-07-30
snort GPL MISC ident version request rev 5 2012-07-30
snort GPL DNS named authors attempt rev 8 2012-07-30
snort GPL FTP RNTO overflow attempt rev 8 2012-07-30
snort GPL MISC rlogin root rev 6 2012-07-30
snort GPL MISC rlogin echo++ rev 6 2012-07-30
snort GPL P2P GNUTella client request rev 7 2012-07-30
snort GPL EXPLOIT .cmd executable file parsing attack rev 6 2012-07-30
snort GPL FTP STAT overflow attempt rev 13 2012-07-30
snort GPL SNMP public access tcp rev 14 2012-07-30
snort GPL POLICY PCAnywhere Attempted Administrator Login rev 5 2012-07-30
snort GPL MISC rwhoisd format string attempt rev 7 2012-07-30
snort GPL FTP CWD ... rev 8 2012-07-30
snort GPL FTP PORT bounce attempt rev 2 2012-07-30