Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL RPC portmap RQUOTA request TCP rev 8 2011-04-22
snort GPL FTP RMDIR overflow attempt rev 7 2011-04-22
snort GPL CHAT MSN login attempt rev 3 2011-04-21
snort ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script UNION SELECT SQL Injection Attempt rev 2 2011-04-21
snort ET WEB_SPECIFIC_APPS Joomla virtuemart Blind SQL Injection Attempt rev 3 2011-04-21
snort GPL RPC portmap UNSET attempt TCP 111 rev 6 2011-04-21
snort GPL MISC CVS invalid module response rev 3 2011-04-21
snort GPL RPC yppasswd username overflow attempt UDP rev 10 2011-04-21
snort GPL SQL Slammer Worm propagation attempt rev 9 2011-04-21
snort ET WEB_SPECIFIC_APPS WordPress WP Publication file Parameter Local File Inclusion Attempt rev 2 2011-04-21
snort ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script INSERT INTO SQL Injection Attempt rev 2 2011-04-21
snort GPL MISC CVS missing cvsroot response rev 3 2011-04-21
snort GPL WEB_SERVER perl post attempt rev 7 2011-04-21
snort GPL CHAT MSN outbound file transfer request rev 7 2011-04-21
snort GPL CHAT MSN outbound file transfer rejected rev 7 2011-04-21
snort GPL MISC CVS double free exploit attempt response rev 5 2011-04-21
snort GPL FTP REST overflow attempt rev 7 2011-04-21
snort GPL WORM Slammer Worm propagation attempt OUTBOUND rev 8 2011-04-21
snort ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script DELETE FROM SQL Injection Attempt rev 2 2011-04-21
snort GPL FTP PASS overflow attempt rev 17 2011-04-21
snort GPL FTP DELE overflow attempt rev 9 2011-04-21
snort GPL MISC CVS invalid user authentication response rev 5 2011-04-21
snort GPL MISC CVS invalid repository response rev 3 2011-04-21
snort GPL RPC portmap UNSET attempt UDP 111 rev 6 2011-04-21
snort GPL CHAT MSN user search rev 2 2011-04-21
snort GPL RPC portmap kcms_server request TCP rev 11 2011-04-21
snort GPL RPC portmap espd request UDP rev 13 2011-04-21
snort GPL RPC portmap status request TCP rev 7 2011-04-21
snort ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script SELECT FROM SQL Injection Attempt rev 2 2011-04-21
snort GPL FTP MKD overflow attempt rev 10 2011-04-21
snort GPL RPC portmap kcms_server request UDP rev 11 2011-04-21
snort GPL FTP RMD overflow attempt rev 10 2011-04-21
snort ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script UPDATE SET SQL Injection Attempt rev 2 2011-04-21
snort GPL CHAT MSN outbound file transfer accept rev 6 2011-04-21
snort GPL MISC CVS invalid directory response rev 5 2011-04-21
snort ET ATTACK_RESPONSE Possible MS CMD Shell opened on local system rev 9 2011-04-15
snort ET WEB_SPECIFIC_APPS vBulletin cChatBox messageid Parameter SELECT FROM SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS PHP-Nuke Surveys pollID parameter UNION SELECT SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS eyeOS file Parameter Local File Inclusion Attempt rev 2 2011-04-11
snort ET POLICY Windows-Based OpenSSL Tunnel Outbound rev 5 2011-04-11