Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Mambo Zorder zorder Parameter INSERT INTO SQL Injection Vulnerability rev 3 2012-04-30
snort ET ACTIVEX Quest Explain Plan Display ActiveX Control SaveToFile Insecure Method Access rev 2 2012-04-28
snort ET ACTIVEX Quest Explain Plan Display ActiveX Control SaveToFile Insecure Method Access 2 rev 2 2012-04-28
snort ET WEB_SPECIFIC_APPS Joomla com_some controller Parameter Local File Inclusion Attempt rev 3 2012-04-28
snort ET ACTIVEX Tracker Software pdfSaver ActiveX StoreInRegistry Method Access Potential Buffer Overflow rev 4 2012-04-28
snort ET ACTIVEX Tracker Software pdfSaver ActiveX StoreInRegistry Method Access Potential Buffer Overflow 2 rev 4 2012-04-28
snort ET ACTIVEX Tracker Software pdfSaver ActiveX InitFromRegistry Method Access Potential Buffer Overflow rev 3 2012-04-28
snort ET CURRENT_EVENTS Incognito Exploit Kit PDF request to images.php?t=81118 rev 3 2012-04-26
snort ET TROJAN ConstructorWin32/Agent.V rev 6 2012-04-26
snort ET TROJAN Backdoor Win32.Idicaf/Atraps rev 7 2012-04-26
snort ET CURRENT_EVENTS TDS Sutra - redirect received rev 4 2012-04-25
snort ET CURRENT_EVENTS TDS Sutra - cookie set rev 2 2012-04-25
snort ET WEB_SPECIFIC_APPS Possible HP Power Manager Management Web Server Login Remote Buffer Overflow Attempt rev 6 2012-04-24
snort ET POLICY Dlink Soho Router Config Page Access Attempt rev 7 2012-04-24
snort ET TROJAN BlackEnergy v2.x HTTP Request with Encrypted Variables rev 7 2012-04-23
snort ET CURRENT_EVENTS TDS Sutra - cookie is set RULEZ rev 1 2012-04-18
snort ET CURRENT_EVENTS TDS Sutra - cookie set RULEZ rev 1 2012-04-18
snort ET TROJAN Trojan.Win32.Yakes.pwo Checkin rev 2 2012-04-17
snort ET TROJAN FlashBack Mac OSX malware Checkin rev 4 2012-04-17
snort ET TROJAN Mac Flashback Checkin 1 rev 1 2012-04-17
snort ET CURRENT_EVENTS Incognito Exploit Kit Java request to images.php?t= rev 1 2012-04-17
snort ET TROJAN OS X Backdoor Checkin rev 1 2012-04-16
snort ET ACTIVEX Possible Edraw Diagram Component 5 ActiveX LicenseName Access Potential buffer overflow DOS 2 rev 3 2012-04-16
snort ET TROJAN W32/UltimateDefender.FakeAV Checkin rev 2 2012-04-16
snort ET ACTIVEX Possible Edraw Diagram Component 5 ActiveX LicenseName Access Potential buffer overflow DOS rev 3 2012-04-16
snort ET TROJAN Likely Infected HTTP POST to PHP with User-Agent of HTTP Client rev 2 2012-04-16
snort ET ACTIVEX Possible Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability rev 2 2012-04-13
snort ET ACTIVEX Possible IBM Tivoli Provisioning Manager Express Isig.isigCtl.1 ActiveX RunAndUploadFile Method Overflow 2 rev 2 2012-04-13
snort ET CURRENT_EVENTS TDS Sutra - cookie set rev 3 2012-04-13
snort ET WEB_SPECIFIC_APPS Joomla com_bulkenquery controller parameter Local File Inclusion Attempt rev 2 2012-04-13
snort ET WEB_SPECIFIC_APPS wordpress thecartpress plugin loop parameter Local File Inclusion Attempt rev 2 2012-04-13
snort ET WEB_SPECIFIC_APPS Joomla com_br controller parameter Local File Inclusion Attempt rev 2 2012-04-13
snort ET ACTIVEX Possible Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability 2 rev 2 2012-04-13
snort ET ACTIVEX Possible IBM Tivoli Provisioning Manager Express Isig.isigCtl.1 ActiveX RunAndUploadFile Method Overflow rev 2 2012-04-13
snort ET CURRENT_EVENTS TDS Sutra - request in.cgi rev 1 2012-04-12
snort ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS rev 1 2012-04-12
snort ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS rev 4 2012-04-12
snort ET CURRENT_EVENTS TDS Sutra - redirect received rev 2 2012-04-12
snort ET SCAN FHScan core User-Agent Detect rev 4 2012-04-12
snort ET TROJAN Bzub2 Related RPC/Http Checkin rev 4 2012-04-11