Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SERVER cmd.exe In URI - Possible Command Execution Attempt rev 6 2010-11-09
snort ET WEB_SERVER Onmouseover= in URI - Likely Cross Site Scripting Attempt rev 6 2010-11-09
snort ET SCAN DirBuster Scan in Progress rev 1 2010-11-09
snort ET WEB_SERVER /system32/ in Uri - Possible Protected Directory Access Attempt rev 6 2010-11-09
snort ET SCAN DotDotPwn User-Agent rev 1 2010-11-09
snort ET WEB_SERVER Casper Bot Search RFI Scan rev 6 2010-11-09
snort ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 - Known Exploit Instance rev 6 2010-11-09
snort ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori UPDATE rev 6 2010-11-09
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm langId SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm newsId INSERT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS FuseTalk SQL Injection Attempt -- index.cfm SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori DELETE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS FuseTalk SQL Injection Attempt -- autherror.cfm errorcode UPDATE rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fuzzylime Forum SQL Injection Attempt -- low.php topic INSERT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fuzzylime Forum SQL Injection Attempt -- low.php topic DELETE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm newsId UNION SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fullaspsite Asp Hosting Sitesi SQL Injection Attempt -- windows.asp kategori_id UPDATE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp cat UNION SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Flash Quiz num_questions.php quiz Parameter SQL Injection rev 4 2010-11-08
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp cat DELETE rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fullaspsite ASP Hosting Site SQL Injection Attempt -- listmain.asp cat INSERT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fullaspsite ASP Hosting Site SQL Injection Attempt -- listmain.asp cat UPDATE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- showfile.asp fid INSERT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fuzzylime Forum SQL Injection Attempt -- low.php topic UPDATE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS FuseTalk SQL Injection Attempt -- index.cfm UPDATE rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Gazi Download Portal SQL Injection Attempt -- down_indir.asp id DELETE rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp cat SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm newsId SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm langId UNION SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- showfile.asp fid UNION SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- filelist.asp parentid UNION SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Flatchat pmscript.php with Parameter Local File Inclusion rev 4 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- showfile.asp fid SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fullaspsite ASP Hosting Site SQL Injection Attempt -- listmain.asp cat SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Gazi Download Portal SQL Injection Attempt -- down_indir.asp id UPDATE rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- filelist.asp show_id INSERT rev 8 2010-11-08
snort ET WEB_SPECIFIC_APPS GDL gdl.php node Parameter SQL Injection rev 4 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- filelist.asp parentid SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- showfile.asp fid DELETE rev 7 2010-11-08