Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Winsoft.E Checkin 2 rev 2 2011-01-24
snort ET WEB_SPECIFIC_APPS LetoDMS lang Parameter Local File Inclusion Attempt rev 2 2011-01-21
snort ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter DELETE FROM SQL Injection Attempt rev 2 2011-01-21
snort ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter UPDATE SET SQL Injection Attempt rev 2 2011-01-21
snort ET WEB_SERVER Possible Cisco Adaptive Security Appliance Web VPN FTP or CIFS Authentication Form Phishing Attempt rev 5 2011-01-21
snort ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter SELECT FROM SQL Injection Attempt rev 2 2011-01-21
snort ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter INSERT INTO SQL Injection Attempt rev 2 2011-01-21
snort ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter UNION SELECT SQL Injection Attempt rev 2 2011-01-21
snort ET WEB_SERVER HP OpenView /OvCgi/Toolbar.exe Accept Language Heap Buffer Overflow Attempt rev 9 2011-01-20
snort ET SCAN Inspathx Path Disclosure Scan rev 4 2011-01-20
snort ET ACTIVEX Novell iPrint ActiveX GetDriverSettings Remote Code Execution Attempt rev 1 2011-01-20
snort ET WEB_SERVER Possible HP OpenView Network Node Manager ovalarm.exe CGI Buffer Overflow Attempt rev 8 2011-01-20
snort ET WORM Possible Worm Sohanad.Z or Other Infection Request for setting.nql rev 1 2011-01-17
snort ET WEB_SERVER Possible DD-WRT Metacharacter Injection Command Execution Attempt rev 8 2011-01-15
snort ET WEB_SPECIFIC_APPS axdcms aXconf Parameter Local File Inclusion Attempt rev 2 2011-01-15
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php DELETE rev 7 2011-01-11
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php UPDATE rev 7 2011-01-11
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php UNION SELECT rev 7 2011-01-11
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php SELECT rev 7 2011-01-11
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php INSERT rev 7 2011-01-11
snort ET GAMES Blizzard Web Downloader Install Detected rev 2 2011-01-10
snort ET WEB_SPECIFIC_APPS Informacion General informacion_general.php INSERT INTO SQL Injection Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Tiki Wiki CMS Groupware language Parameter Local File Inclusion Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Informacion General informacion_general.php UPDATE SET SQL Injection Attempt rev 3 2011-01-07
snort ET WEB_CLIENT Microsoft Office Visio DXF File Processing Remote Code Execution rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Joomla Component com_xmovie file Parameter Local File Inclusion Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Informacion General informacion_general.php SELECT FROM SQL Injection Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Informacion General informacion_general.php UNION SELECT SQL Injection Attempt rev 3 2011-01-07
snort ET WEB_SERVER PHP Large Subnormal Double Precision Floating Point Number PHP DoS Inbound rev 2 2011-01-06
snort ET WEB_SERVER PHP Large Subnormal Double Precision Floating Point Number PHP DoS in URI rev 2 2011-01-06
snort ET WEB_CLIENT DXF Extension File Detection Access Flowbit Set rev 2 2011-01-06
snort ET WEB_CLIENT Microsoft Windows MPEG Layer-3 Audio Decoder Buffer Overflow rev 3 2011-01-05
snort ET POLICY Protocol 41 IPv6 encapsulation potential 6in4 IPv6 tunnel active rev 2 2011-01-05
snort ET WEB_SERVER SELECT USER SQL Injection Attempt in URI rev 4 2011-01-05
snort ET WEB_CLIENT AVI RIFF Chunk Access Flowbit Set rev 2 2011-01-05
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-5 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-8 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-2 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-3 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-1 rev 3 2010-12-30