Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key DELETE rev 6 2010-10-02
snort ET TROJAN Egspy Infection Report Email rev 3 2010-10-02
snort ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key UNION SELECT rev 6 2010-10-02
snort ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key UPDATE rev 6 2010-10-02
snort ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id UNION SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UPDATE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay INSERT rev 6 2010-10-01
snort ET CHAT Gadu-Gadu Chat Client Checkin via HTTP rev 7 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft DELETE rev 6 2010-10-01
snort ET TROJAN Common Downloader Install Count Tracking URL rev 3 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay DELETE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id DELETE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft INSERT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft UNION SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id UPDATE rev 6 2010-10-01
snort ET TROJAN Common Downloader Access Count Tracking URL rev 3 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user INSERT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft UPDATE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay UPDATE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UNION SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UPDATE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay UNION SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id INSERT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user DELETE rev 6 2010-10-01
snort ET TROJAN dlink router access attempt rev 4 2010-09-30
snort ET TROJAN Banker.Delf Infection variant 4 - Sending Initial Email to Owner rev 4 2010-09-30
snort ET TROJAN Win32/Chekafe.A or Related Infection Checkin rev 3 2010-09-30
snort ET TROJAN Daemonize.ft HTTP Checkin rev 3 2010-09-30
snort ET WEB_CLIENT Apple Quicktime RTSP Content-Type overflow attempt rev 6 2010-09-30
snort ET TROJAN Banload Downloader Infection - Sending initial email to owner rev 4 2010-09-30
snort ET TROJAN Dialer.Trojan Activity rev 3 2010-09-30
snort ET TROJAN Dialer-715 Install Checkin rev 4 2010-09-30
snort ET TROJAN Banker.Delf Infection - Sending Initial Email to Owner rev 8 2010-09-30
snort ET TROJAN Cashout Proxy Bot reg_DST rev 3 2010-09-30
snort ET SCAN w3af Scan Remote File Include Retrieval rev 3 2010-09-29
snort ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter INSERT INTO SQL Injection Attempt rev 3 2010-09-29