Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SERVER IIS INDEX_ALLOCATION Auth Bypass Attempt rev 1 2012-06-11
snort ET WEB_SPECIFIC_APPS Joomla com_jradio controller parameter Local File Inclusion Attempt rev 2 2012-06-08
snort ET WEB_SPECIFIC_APPS Joomla com_jeauto view parameter Local File Inclusion Attempt rev 3 2012-06-08
snort ET POLICY SN and CN From MS TS Revoked Cert Chain Seen rev 3 2012-06-08
snort ET WEB_SPECIFIC_APPS Joomla com_catalogue controller parameter Local File Inclusion Attempt rev 3 2012-06-08
snort ET CURRENT_EVENTS Redirect to driveby sid=mix rev 1 2012-06-07
snort ET TROJAN FakeAvCn-A Checkin 1 rev 2 2012-06-05
snort ET CURRENT_EVENTS Sakura Exploit Kit Version 1.1 Archive Request rev 1 2012-06-05
snort ET WEB_SPECIFIC_APPS Joomla Jotloader component section parameter Local File Inclusion Attempt rev 2 2012-06-01
snort ET WEB_SPECIFIC_APPS Exponent file parameter Local File Inclusion Attempt rev 2 2012-06-01
snort ET TROJAN W32/Renos.Downloader User Agent zeroup rev 1 2012-05-25
snort ET WEB_SPECIFIC_APPS Joomla Component JE Story Submit view parameter Local File Inclusion Attempt rev 3 2012-05-25
snort ET WEB_SPECIFIC_APPS Joomla com_acooldebate controller parameter Local File Inclusion Attempt rev 2 2012-05-25
snort ET TROJAN VBS/Wimmie.A Set rev 6 2012-05-24
snort ET TROJAN Downloader.VB.TX/Backdoor.Win32.DSSdoor!IK Checkin rev 8 2012-05-23
snort ET CURRENT_EVENTS Fragus Exploit jar Download rev 2 2012-05-23
snort ET TROJAN Win32/Sisron/BackDoor.Cybergate.1 Checkin rev 8 2012-05-23
snort ET TROJAN Hoax.Win32.BadJoke/DownLoader1.57593 Checkin rev 3 2012-05-23
snort ET POLICY OpenVPN Update Check rev 1 2012-05-22
snort ET TROJAN Win32/MultiPasswordRecovery.A cs-crash PWS rev 3 2012-05-19
snort ET WEB_SPECIFIC_APPS Joomla Appointment Booking Pro view parameter Local File Inclusion Attempt rev 3 2012-05-18
snort ET WEB_SPECIFIC_APPS Joomla com_media file parameter Local File Inclusion Attempt rev 3 2012-05-18
snort ET TROJAN W32/SpyBanker Infection Confirmation Email 2 rev 1 2012-05-17
snort ET TROJAN Win32/Comrerop Checkin to FTP server rev 2 2012-05-17
snort ET POLICY Internal Host Getting External IP Address - ip2city.asp rev 1 2012-05-17
snort ET TROJAN W32/Downvision.A Initial Checkin rev 4 2012-05-16
snort ET SCAN Core-Project Scanning Bot UA Detected rev 6 2012-05-16
snort ET SCAN Cisco Torch IOS HTTP Scan rev 9 2012-05-16
snort ET TROJAN Medfos/Midhos Checkin rev 2 2012-05-10
snort ET WEB_SPECIFIC_APPS WordPress WP Custom Pages url parameter Local File Inclusion Attempt rev 2 2012-05-04
snort ET WEB_SPECIFIC_APPS Joomla com_joomtouch controller parameter Local File Inclusion Attempt rev 2 2012-05-04
snort ET WEB_SPECIFIC_APPS Joomla com_obsuggest controller parameter Local File Inclusion Attempt rev 2 2012-05-04
snort ET SCAN Vega Web Application Scan rev 2 2012-05-02
snort ET TROJAN P2P Zeus or ZeroAccess Request To CnC rev 9 2012-05-02
snort ET CURRENT_EVENTS DRIVEBY Generic - Redirection to Kit - BrowserDetect with var stopit rev 2 2012-05-02
snort ET TROJAN Win32/Ponmocup.A Checkin rev 3 2012-05-01
snort ET WEB_SPECIFIC_APPS Mambo Zorder zorder Parameter INSERT INTO SQL Injection Vulnerability rev 3 2012-04-30
snort ET CURRENT_EVENTS Unkown exploit kit pdf download rev 2 2012-04-30
snort ET EXPLOIT PWDump4 Password dumping exe copied to victim rev 3 2012-04-30
snort ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter UPDATE SET SQL Injection Attempt rev 3 2012-04-30