Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET MOBILE_MALWARE Android.YzhcSms URL for Possible File Download rev 1 2011-06-22
snort ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter UNION SELECT SQL Injection Attempt rev 1 2011-06-22
snort ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter INSERT INTO SQL Injection Attempt rev 1 2011-06-22
snort GPL DNS named version attempt rev 9 2011-06-22
snort ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter UPDATE SET SQL Injection Attempt rev 1 2011-06-22
snort GPL DNS named iquery attempt rev 9 2011-06-22
snort ET MOBILE_MALWARE Android.HongTouTou Checkin rev 1 2011-06-21
snort ET POLICY Peach C++ Library User Agent Inbound rev 2 2011-06-17
snort ET USER_AGENTS Binget PHP Library User Agent Outbound rev 1 2011-06-17
snort ET USER_AGENTS PyCurl Suspicious User Agent Outbound rev 1 2011-06-17
snort ET WEB_SERVER PyCurl Suspicious User Agent Inbound rev 1 2011-06-17
snort ET WEB_SERVER pxyscand Suspicious User Agent Inbound rev 2 2011-06-17
snort ET USER_AGENTS pxyscand/ Suspicious User Agent Outbound rev 1 2011-06-17
snort ET WEB_SERVER Inbound PHP User-Agent rev 2 2011-06-17
snort ET WEB_SERVER Outbound PHP User-Agent rev 2 2011-06-17
snort ET WEB_SERVER Binget PHP Library User Agent Inbound rev 1 2011-06-17
snort ET MOBILE_MALWARE Android.Tonclank JAR File Download rev 2 2011-06-16
snort ET USER_AGENTS EmailSiphon Suspicious User-Agent Inbound rev 2 2011-06-14
snort ET USER_AGENTS EmailSiphon Suspicious User-Agent Outbound rev 1 2011-06-14
snort ET WEB_SERVER PHP Possible zlib Remote File Inclusion Attempt rev 4 2011-06-11
snort ET WEB_SERVER PHP Possible https Local File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible rar Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible data Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible ogg Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible glob Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible ftps Local File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible php Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible ftp Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible phar Remote File Inclusion Attempt rev 4 2011-06-11
snort ET WEB_SERVER PHP Possible expect Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible file Remote File Inclusion Attempt rev 5 2011-06-11
snort ET WEB_SERVER PHP Possible ssh2 Remote File Inclusion Attempt rev 3 2011-06-11
snort ET SMTP Robtex.com Block Message rev 2 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script SELECT FROM SQL Injection Attempt rev 1 2011-06-10
snort ET WEB_SPECIFIC_APPS People Joomla Component controller Parameter Local File Inclusion Vulnerability rev 1 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script UPDATE SET SQL Injection Attempt rev 1 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script UNION SELECT SQL Injection Attempt rev 3 2011-06-10
snort ET POLICY StumbleUpon Submission Detected rev 2 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script INSERT INTO SQL Injection Attempt rev 1 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script DELETE FROM SQL Injection Attempt rev 3 2011-06-10