Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET VOIP Possible Modified Sipvicious OPTIONS Scan rev 2 2011-03-01
snort ET WEB_CLIENT Hex Obfuscation of replace Javascript Function %u UTF-16 Encoding rev 2 2011-03-01
snort ET USER_AGENTS Suspicious User-Agent VCTestClient rev 1 2011-02-27
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS WeBid active_auctions.php lan Parameter Local File inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PMB Services id Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Services id Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PMB Services id Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Horde type Parameter Local File Inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS CultBooking lang parameter Local File Inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Woltlab Burning Board katid Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHPCMS modelid Parameter SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Joomla XGallery com_xgallery Component Local File Inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Woltlab Burning Board katid Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Joomla Frontend-User-Access controller Parameter Local File Inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Woltlab Burning Board katid Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PMB Services id Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Woltlab Burning Board katid Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Dokeos and Chamilo open_document.php file Parameter File Disclosure Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Woltlab Burning Board katid Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PMB Services id Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET NETBIOS Microsoft Windows Server 2003 Active Directory Pre-Auth BROWSER ELECTION Heap Overflow Attempt rev 2 2011-02-21
snort ET TROJAN Fake Opera 8.11 UA related to Trojan Activity rev 1 2011-02-18
snort ET WEB_SERVER DD-WRT Information Disclosure Attempt rev 3 2011-02-17
snort ET TROJAN Rootkit TDSS/Alureon Checkin 2 rev 1 2011-02-14
snort ET TROJAN Downloader.Win32.Small CnC Beacon rev 7 2011-02-08