Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL RPC STATD UDP monitor mon_name format string exploit attempt rev 10 2011-04-26
snort ET WEB_SERVER HTTP 414 Request URI Too Large rev 4 2011-04-26
snort GPL SCAN SolarWinds IP scan attempt rev 7 2011-04-26
snort GPL RPC CMSD TCP CMSD_CREATE buffer overflow attempt rev 10 2011-04-26
snort GPL RPC CMSD TCP CMSD_INSERT buffer overflow attempt rev 13 2011-04-26
snort GPL FTP CWD overflow attempt rev 23 2011-04-26
snort GPL RPC CMSD UDP CMSD_CREATE buffer overflow attempt rev 11 2011-04-26
snort ET SCAN OpenVAS User-Agent Inbound rev 4 2011-04-26
snort GPL IMAP find overflow attempt rev 8 2011-04-26
snort GPL RPC STATD UDP stat mon_name format string exploit attempt rev 11 2011-04-26
snort GPL RPC STATD TCP monitor mon_name format string exploit attempt rev 10 2011-04-26
snort GPL IMAP rename overflow attempt rev 9 2011-04-26
snort ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter DELETE FROM SQL Injection Attempt rev 2 2011-04-23
snort ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter UNION SELECT SQL Injection Attempt rev 2 2011-04-23
snort ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter UPDATE SET SQL Injection Attempt rev 2 2011-04-23
snort ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter INSERT INTO SQL Injection Attempt rev 2 2011-04-23
snort ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter SELECT FROM SQL Injection Attempt rev 2 2011-04-23
snort GPL RPC portmap SET attempt TCP 111 rev 6 2011-04-22
snort ET POLICY MS Remote Desktop Service User Login Request rev 1 2011-04-22
snort GPL RPC tooltalk TCP overflow attempt rev 9 2011-04-22
snort GPL FTP SITE NEWER overflow attempt rev 7 2011-04-22
snort GPL POP3 XTND overflow attempt rev 5 2011-04-22
snort GPL RPC portmap proxy attempt TCP rev 7 2011-04-22
snort GPL POP3 LIST overflow attempt rev 8 2011-04-22
snort GPL RPC portmap RQUOTA request TCP rev 8 2011-04-22
snort GPL FTP CMD overflow attempt rev 11 2011-04-22
snort GPL FTP shadow retrieval attempt rev 6 2011-04-22
snort GPL RPC portmap RQUOTA request UDP rev 8 2011-04-22
snort GPL FTP ALLO overflow attempt rev 2 2011-04-22
snort GPL FTP .forward rev 6 2011-04-22
snort GPL RPC portmap NFS request TCP rev 8 2011-04-22
snort GPL POP3 AUTH overflow attempt rev 9 2011-04-22
snort GPL RPC portmap SET attempt UDP 111 rev 6 2011-04-22
snort GPL FTP SITE ZIPCHK overflow attempt rev 6 2011-04-22
snort ET POLICY MS Terminal Server Root login rev 1 2011-04-22
snort GPL FTP RMDIR overflow attempt rev 7 2011-04-22
snort GPL RPC portmap NFS request UDP rev 8 2011-04-22
snort GPL RPC tooltalk UDP overflow attempt rev 9 2011-04-22
snort ET WEB_SPECIFIC_APPS LightNEasy File Manager language Parameter Local File Inclusion Attempt rev 2 2011-04-22
snort GPL RPC portmap proxy attempt UDP rev 7 2011-04-22