Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL MISC rsh froot rev 6 2012-07-30
snort GPL EXPLOIT echo command attempt rev 7 2012-07-27
snort GPL EXPLOIT sp_start_job - program execution rev 7 2012-07-27
snort GPL EXPLOIT ISAPI .idq access rev 12 2012-07-27
snort GPL EXPLOIT cmd? access rev 10 2012-07-27
snort GPL SNMP private access udp rev 12 2012-07-27
snort GPL SMTP expn decode rev 10 2012-07-27
snort GPL EXPLOIT xp_cmdshell - program execution rev 6 2012-07-27
snort GPL EXPLOIT iisadmpwd attempt rev 12 2012-07-27
snort ET ACTIVEX Possible Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute rev 2 2012-07-27
snort GPL EXPLOIT administrators.pwd access rev 9 2012-07-27
snort GPL EXPLOIT ISAPI .ida access rev 13 2012-07-27
snort GPL EXPLOIT xp_sprintf possible buffer overflow rev 10 2012-07-27
snort GPL EXPLOIT rsh froot rev 7 2012-07-27
snort GPL EXPLOIT ISAPI .idq attempt rev 16 2012-07-27
snort GPL EXPLOIT fpcount access rev 11 2012-07-27
snort GPL SNMP public access udp rev 12 2012-07-27
snort ET WEB_SPECIFIC_APPS Joomla PollXT component Itemid parameter Local File Inclusion Attempt rev 1 2012-07-27
snort GPL EXPLOIT .htr access rev 16 2012-07-27
snort GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt rev 11 2012-07-27
snort GPL SMTP vrfy decode rev 10 2012-07-27
snort GPL EXPLOIT ISAPI .ida attempt rev 13 2012-07-27
snort ET ACTIVEX Possible WinZip FileView ActiveX CreateNewFolderFromName Method Access Buffer Overflow rev 2 2012-07-27
snort GPL EXPLOIT login buffer non-evasive overflow attempt rev 4 2012-07-27
snort GPL EXPLOIT /iisadmpwd/aexp2.htr access rev 12 2012-07-27
snort GPL SMTP vrfy root rev 7 2012-07-27
snort GPL SNMP SNMP NT UserList rev 8 2012-07-27
snort GPL EXPLOIT xp_filelist attempt rev 7 2012-07-27
snort GPL SMTP RCPT TO overflow rev 15 2012-07-27
snort GPL EXPLOIT iissamples access rev 8 2012-07-27
snort GPL EXPLOIT /msadc/samples/ access rev 10 2012-07-27
snort GPL SMTP expn root rev 13 2012-07-27
snort ET WEB_SPECIFIC_APPS Joomla com_picasa2gallery controller parameter Local File Inclusion vulnerability rev 1 2012-07-27
snort GPL EXPLOIT CodeRed v2 root.exe access rev 10 2012-07-27
snort GPL EXPLOIT rsh bin rev 6 2012-07-27
snort GPL SNMP PROTOS test-suite-trap-app attempt rev 6 2012-07-27
snort ET TROJAN FakeAvCn-A Checkin 3 rev 3 2012-07-26
snort ET TROJAN ProxyBox - HTTP CnC - POST 1-letter.php rev 5 2012-07-24
snort ET WEB_SPECIFIC_APPS ClickTech ClickContact SQL Injection Attempt -- default.asp AlphaSort UNION SELECT rev 6 2012-07-23
snort ET WEB_SPECIFIC_APPS SaschArt SasCam Webcam Server ActiveX Buffer Overflow Function Call rev 3 2012-07-23