Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET ACTIVEX AVTECH Software ActiveX _DownloadPBControl Method Buffer Overflow Attempt rev 4 2010-10-15
snort ET WEB_SPECIFIC_APPS Alan Ward A-Cart Pro SQL Injection Attempt -- product.asp productid SELECT rev 8 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX _DownloadPBOpen Method Buffer Overflow Attempt rev 5 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX _DownloadPBClose Method Buffer Overflow Attempt rev 4 2010-10-15
snort ET TROJAN Lethic Spambot CnC Initial Connect rev 5 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX Snapshot Method Buffer Overflow Attempt rev 5 2010-10-15
snort ET WEB_SPECIFIC_APPS Aktueldownload Haber script SQL Injection Attempt -- rss.asp kid UPDATE rev 7 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX Login Method Buffer Oveflow Attempt rev 4 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX SendCommand Method Buffer Overflow Attempt rev 4 2010-10-15
snort ET WEB_CLIENT FakeAV scanner page encountered Initializing Virus Protection System rev 2 2010-10-15
snort ET ACTIVEX AoA Audio Extractor ActiveX Control Buffer Overflow Attempt rev 1 2010-10-13
snort ET SCAN Inspathx Path Disclosure Scanner User-Agent Detected rev 2 2010-10-13
snort ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter DELETE FROM SQL Injection Attempt rev 4 2010-10-09
snort ET WEB_SERVER Possible 3Com OfficeConnect Router Default User Account Remote Command Execution Attempt rev 4 2010-10-09
snort ET EXPLOIT Linksys WAP54G debug.cgi Shell Access as Gemtek rev 5 2010-10-06
snort ET TROJAN Zbot/Beomok/PSW - HTTP POST rev 4 2010-10-05
snort ET TROJAN Win32.Virut - GET rev 5 2010-10-05
snort ET TROJAN Win32.Small.AB or related Post-infection checkin rev 3 2010-10-05
snort ET ACTIVEX Microsoft DirectX 9 ActiveX Control Format String Function Call rev 2 2010-10-05
snort ET TROJAN Tibs Checkin rev 5 2010-10-05
snort ET TROJAN Theoreon.com Related Trojan Checkin rev 3 2010-10-05
snort ET POLICY Smilebox Spyware Download rev 9 2010-10-05
snort ET TROJAN Zhelatin npopup Update Detected rev 4 2010-10-05
snort ET CHAT Gadu-Gadu IM Login Server Request rev 6 2010-10-05
snort ET POLICY iTunes User Agent rev 6 2010-10-05
snort ET TROJAN xpsecuritycenter.com Fake AntiVirus GET-Install Checkin rev 4 2010-10-05
snort ET POLICY Dell MyWay Remote control agent rev 4 2010-10-05
snort ET TROJAN Win32 Cloaker Related Post Infection Checkin rev 4 2010-10-05
snort ET TROJAN TDSServ or Tidserv variant Checkin rev 4 2010-10-05
snort ET TROJAN Shiz/Rohimafo Checkin rev 3 2010-10-05
snort ET CHAT General MSN Chat Activity rev 3 2010-10-05
snort ET TROJAN WindowsEnterpriseSuite FakeAV get_product_domains.php rev 4 2010-10-05
snort ET TROJAN Virusremover2008.com Checkin rev 5 2010-10-05
snort ET TROJAN Zbot/Zeus or Related Infection Checkin rev 7 2010-10-05
snort ET TROJAN Zlob Updating via HTTP rev 5 2010-10-05
snort ET POLICY Metacafe.com Social Site Access rev 5 2010-10-05
snort ET TROJAN Virtumod/Agent.ufv/Virtumonde Get Request rev 4 2010-10-05
snort ET POLICY CBS Streaming Video rev 6 2010-10-05
snort ET TROJAN Banito/Agent.pb Pass Stealer Email Report Outbound rev 3 2010-10-04
snort ET TROJAN Obitel Downloader Request rev 4 2010-10-04