Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL SHELLCODE x86 0x71FB7BAB NOOP rev 4 2012-01-16
snort GPL NETBIOS SMB trans2open buffer overflow attempt rev 10 2012-01-16
snort GPL RPC sadmind query with root credentials attempt TCP rev 5 2012-01-16
snort ET TROJAN Downloader Win32.Small.agoy Checkin rev 6 2012-01-16
snort GPL IMAP auth overflow attempt rev 3 2012-01-16
snort GPL RPC rexec username too long response rev 6 2012-01-16
snort GPL NETBIOS DCERPC invalid bind attempt rev 5 2012-01-16
snort GPL NETBIOS SMB-DS DCERPC ISystemActivator bind attempt rev 12 2012-01-16
snort GPL NETBIOS SMB-DS DCERPC Remote Activation bind attempt rev 15 2012-01-16
snort GPL EXPLOIT rsyncd module list access rev 3 2012-01-16
snort ET POLICY Splashtop Remote Control Session Start Request rev 1 2012-01-16
snort GPL P2P BitTorrent transfer rev 3 2012-01-16
snort GPL RPC portmap network-status-monitor request TCP rev 7 2012-01-16
snort GPL NETBIOS SMB DCERPC Workstation Service bind attempt rev 7 2012-01-16
snort GPL RPC portmap proxy integer overflow attempt TCP rev 6 2012-01-16
snort GPL SMTP AUTH LOGON brute force attempt rev 3 2012-01-16
snort GPL WEB_SERVER mod_gzip_status access rev 3 2012-01-16
snort ET POLICY Possible Web Crawl - libwww-perl User Agent rev 9 2012-01-16
snort GPL RPC mountd UDP mount path overflow attempt rev 8 2012-01-16
snort GPL NETBIOS DCERPC Remote Activation bind attempt rev 16 2012-01-16
snort GPL SHELLCODE x86 0x71FB7BAB NOOP unicode rev 4 2012-01-16
snort GPL NETBIOS SMB startup folder access rev 6 2012-01-16
snort GPL NETBIOS SMB DCERPC invalid bind attempt rev 4 2012-01-16
snort GPL WEB_SERVER Tomcat null byte directory listing attempt rev 6 2012-01-16
snort GPL NETBIOS SMB-DS DCERPC Workstation Service unicode bind attempt rev 9 2012-01-16
snort GPL WEB_SERVER globals.pl access rev 5 2012-01-16
snort GPL NETBIOS SMB-DS DCERPC Workstation Service bind attempt rev 8 2012-01-16
snort GPL NETBIOS SMB-DS DCERPC Messenger Service buffer overflow attempt rev 10 2012-01-16
snort GPL NETBIOS SMB DCERPC Workstation Service unicode bind attempt rev 7 2012-01-16
snort GPL NETBIOS DCERPC Workstation Service direct service bind attempt rev 7 2012-01-16
snort GPL RPC sadmind query with root credentials attempt UDP rev 5 2012-01-16
snort GPL RPC mountd TCP mount path overflow attempt rev 8 2012-01-16
snort GPL NETBIOS SMB startup folder unicode access rev 5 2012-01-16
snort GPL MISC CVS non-relative path error response rev 5 2012-01-16
snort GPL POP3 STAT overflow attempt rev 4 2012-01-16
snort GPL NETBIOS DCERPC Workstation Service direct service access attempt rev 7 2012-01-16
snort GPL RPC portmap rpc.xfsmd request TCP rev 10 2012-01-16
snort ET POLICY request to .xxx TLD rev 4 2012-01-16
snort GPL RPC portmap network-status-monitor request UDP rev 7 2012-01-16
snort GPL P2P BitTorrent announce request rev 4 2012-01-16