Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY external cPanel password change rev 1 2011-11-18
snort ET POLICY external cPanel login rev 1 2011-11-18
snort ET WEB_SERVER DNS changer cPanel attempt rev 1 2011-11-18
snort ET TROJAN General Win32 Backdoor Checkin POST Packet 1 rev 8 2011-11-17
snort ET TROJAN Win32/Dofoil.L Checkin rev 3 2011-11-16
snort ET TROJAN Spy-Net Trojan Connection rev 4 2011-11-16
snort ET GAMES Second Life setup download rev 2 2011-11-11
snort ET TROJAN Backdoor.Win32.Svlk Client Checkin rev 1 2011-11-09
snort ET TROJAN GET to Google with specific HTTP lib likely Cycbot/Bifrose/Kryptic checking Internet connection rev 4 2011-11-08
snort ET WEB_SPECIFIC_APPS Joomla techfolio component UPDATE SET SQL Injection Attempt rev 2 2011-11-08
snort ET WEB_SPECIFIC_APPS 1024 CMS filename Parameter Local File Inclusion Attempt rev 2 2011-11-08
snort ET POLICY Bomgar Remote Assistance Tool Download rev 1 2011-11-08
snort ET WEB_SPECIFIC_APPS Joomla techfolio component SELECT FROM SQL Injection Attempt rev 2 2011-11-08
snort ET WEB_SPECIFIC_APPS SnippetMaster vars.inc.php _SESSION Parameter Local File Inclusion rev 4 2011-10-31
snort ET WEB_SPECIFIC_APPS Possible Rentventory SQL Injection Attempt rev 7 2011-10-31
snort ET TROJAN Bot Backdoor Checkin/registration Request rev 6 2011-10-31
snort ET WEB_SPECIFIC_APPS Joomla YJ Contact Local File Inclusion Vulnerability rev 2 2011-10-31
snort ET WEB_SPECIFIC_APPS WHMCompleteSolution templatefile Parameter Local File Inclusion Attempt rev 2 2011-10-31
snort ET SCAN Apache mod_proxy Reverse Proxy Exposure 2 rev 3 2011-10-24
snort ET TROJAN Unruy Downloader Checkin rev 5 2011-10-24
snort ET SCAN Apache mod_proxy Reverse Proxy Exposure 1 rev 2 2011-10-24
snort GPL EXPLOIT Alternate Data streams ASP file access attempt rev 14 2011-10-24
snort ET CHAT IRC USER command rev 15 2011-10-21
snort ET TROJAN IRC DNS request on non-standard port rev 10 2011-10-21
snort ET CHAT IRC PING command rev 15 2011-10-21
snort ET CHAT IRC NICK command rev 18 2011-10-21
snort ET TROJAN IRC DCC chat request on non-standard port rev 11 2011-10-21
snort GPL CHAT IRC DCC chat request rev 10 2011-10-21
snort GPL CHAT IRC DCC file transfer request rev 11 2011-10-21
snort ET CHAT IRC PRIVMSG command rev 20 2011-10-21
snort ET CHAT IRC JOIN command rev 18 2011-10-21
snort ET TROJAN Suspicious HTTP Request for gift.exe rev 1 2011-10-19
snort ET SCAN Paros Proxy Scanner Detected rev 10 2011-10-19
snort ET SCAN NMAP SQL Spider Scan rev 1 2011-10-19
snort ET TROJAN Win32.Cerberus RAT Client pong rev 2 2011-10-14
snort ET TROJAN Win32.Cerberus RAT Server ping rev 2 2011-10-14
snort ET SMTP Abuseat.org Block Message rev 3 2011-10-12
snort ET WEB_SPECIFIC_APPS Joomla Redirect Component view Parameter Local File Inclusion Attempt rev 5 2011-10-12
snort ET WEB_SPECIFIC_APPS Mambo AHS Shop component INSERT INTO SQL Injection Attempt rev 4 2011-10-12
snort ET WEB_SPECIFIC_APPS Mambo AHS Shop component UPDATE SET SQL Injection Attempt rev 4 2011-10-12