Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Joomla Community component userid parameter UNION SELECT SQL Injection Attempt rev 2 2011-08-26
snort ET WEB_SPECIFIC_APPS Joomla Community component userid parameter UPDATE SET SQL Injection Attempt rev 2 2011-08-26
snort ET WEB_SPECIFIC_APPS WordPress UnGallery pic Parameter Local File Inclusion Attempt rev 2 2011-08-26
snort ET WEB_SPECIFIC_APPS Joomla Community component userid parameter INSERT INTO SQL Injection Attempt rev 2 2011-08-26
snort ET SCAN Kingcope KillApache.pl Apache mod_deflate DoS attempt rev 2 2011-08-26
snort ET POLICY SUSPICIOUS *.doc.exe in HTTP URL rev 1 2011-08-26
snort ET WEB_SPECIFIC_APPS Joomla Community component userid parameter DELETE FROM SQL Injection Attempt rev 2 2011-08-26
snort ET POLICY SUSPICIOUS *.pdf.exe in HTTP URL rev 1 2011-08-26
snort ET TROJAN NgrBot IRC CnC Channel Join rev 1 2011-08-24
snort ET TROJAN Troxen Downloader Checkin rev 3 2011-08-24
snort ET POLICY BitCoin User-Agent Likely Bitcoin Miner rev 2 2011-08-24
snort ET POLICY CNET TechTracker Software Manager request rev 2 2011-08-24
snort ET POLICY CNET Custom Installer Possible Bundled Bloatware rev 2 2011-08-24
snort ET TROJAN W32/NetShare User-Agent rev 2 2011-08-23
snort ET TROJAN Win32/TrojanDownloader.Chekafe.D User-Agent my_check_data On Off HTTP Port rev 1 2011-08-22
snort ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 4 rev 2 2011-08-19
snort ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 1 rev 2 2011-08-19
snort ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 5 rev 2 2011-08-19
snort ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 3 rev 2 2011-08-19
snort ET WEB_SPECIFIC_APPS Joomla jfeedback Component controller parameter Local File Inclusion Attempt rev 2 2011-08-19
snort ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 2 rev 2 2011-08-19
snort ET POLICY TeamViewer Keep-alive inbound rev 4 2011-08-18
snort ET WEB_CLIENT Mozilla Firefox mChannel Object Dangling Pointer Use-After-Free Memory Corruption Attempt rev 1 2011-08-18
snort ET TROJAN Win32/Winshow User Agent rev 1 2011-08-11
snort ET POLICY Request to Suspicious Games at pcgame.gamedia.cn rev 2 2011-08-11
snort ET TROJAN W32/Hupigon.B User Agent TSDownload rev 1 2011-08-10
snort ET TROJAN W32/Skintrim CnC Checkin rev 1 2011-08-10
snort ET TROJAN W32/FakeAlert Fake Security Tool Checkin rev 1 2011-08-09
snort ET SCAN Toata Scanner User-Agent Detected rev 8 2011-08-09
snort ET TROJAN W32/Sality Executable Pack Digital Signature ASCII Marker rev 2 2011-08-09
snort ET WEB_SERVER PUT Website Defacement Attempt rev 1 2011-08-05
snort ET TROJAN W32/Nolja Trojan Downloader Initial Checkin rev 1 2011-08-05
snort GPL ATTACK_RESPONSE directory listing rev 8 2011-08-02
snort GPL ATTACK_RESPONSE file copied ok rev 14 2011-08-02
snort GPL ATTACK_RESPONSE isakmp login failed rev 3 2011-08-02
snort GPL ATTACK_RESPONSE command error rev 10 2011-08-02
snort GPL ATTACK_RESPONSE id check returned root rev 8 2011-08-02
snort GPL ATTACK_RESPONSE del attempt rev 9 2011-08-02
snort ET TROJAN Win32.Pamesg/ArchSMS.HL CnC Checkin rev 1 2011-08-02
snort ET WEB_CLIENT Microsoft Visio 2003 mfc71enu.dll DLL Loading Arbitrary Code Execution Attempt rev 1 2011-07-27