Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Joomla Redirect Component view Parameter Local File Inclusion Attempt rev 5 2011-10-12
snort ET WEB_SPECIFIC_APPS Mambo AHS Shop component INSERT INTO SQL Injection Attempt rev 4 2011-10-12
snort ET WEB_CLIENT Adobe Shockwave Director tSAC Chunk memory corruption Attempt rev 5 2011-10-12
snort ET POLICY VMware User-Agent Outbound rev 4 2011-10-12
snort ET TROJAN Backdoor.Win32.Aldibot.A Checkin rev 3 2011-10-11
snort ET SCADA Sunway ForceControl Activex Control Vulnerability rev 3 2011-10-05
snort ET WEB_SPECIFIC_APPS Joomla RokQuickCart view Parameter Local File Inclusion Attempt rev 3 2011-10-05
snort ET TROJAN Trojan-Dropper.Win32.StartPage.dvm or Mebromi Bios Rootkit CnC Count Checkin rev 4 2011-10-05
snort ET TROJAN Trojan Downloader User-Agent BGroom rev 1 2011-10-01
snort ET TROJAN Win32/OnLineGames GetMyIP Style Checkin rev 1 2011-10-01
snort GPL MISC Invalid PCAnywhere Login rev 6 2011-09-29
snort GPL POLICY PCAnywhere Failed Login rev 5 2011-09-29
snort ET WEB_SPECIFIC_APPS TinyWebGallery install_path parameter Local File Inclusion Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir INSERT INTO SQL Injection Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir UNION SELECT SQL Injection Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir UPDATE SET SQL Injection Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir DELETE FROM SQL Injection Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS TinyWebGallery workaround_dir parameter Local File Inclusion Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir SELECT FROM SQL Injection Attempt rev 2 2011-09-28
snort GPL NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt rev 21 2011-09-22
snort ET TROJAN ZeroAccess/Max++ Rootkit C&C Activity 1 rev 1 2011-09-22
snort ET TROJAN Shylock Module Server Response rev 1 2011-09-22
snort GPL NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt rev 7 2011-09-22
snort GPL NETBIOS SMB ADMIN$ share access rev 14 2011-09-21
snort GPL NETBIOS SMB IPC$ share access rev 17 2011-09-21
snort GPL NETBIOS SMB IPC$ unicode share access rev 17 2011-09-21
snort GPL NETBIOS NT NULL session rev 11 2011-09-21
snort GPL NETBIOS SMB CD.. rev 7 2011-09-21
snort GPL NETBIOS DOS RFPoison rev 8 2011-09-21
snort GPL NETBIOS SMB CD... rev 7 2011-09-21
snort GPL NETBIOS SMB D$ share access rev 13 2011-09-21
snort GPL NETBIOS SMB C$ share access rev 17 2011-09-21
snort GPL CHAT ICQ access rev 12 2011-09-21
snort GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS winreg unicode bind attempt rev 9 2011-09-20
snort GPL NETBIOS SMB-DS C$ unicode share access rev 11 2011-09-20
snort GPL NETBIOS SMB IrotIsRunning unicode attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS winreg bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS NDdeSetTrustedShareW overflow attempt rev 6 2011-09-20
snort GPL NETBIOS SMB NT Trans NT CREATE unicode oversized Security Descriptor attempt rev 5 2011-09-20