Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET SCAN Httprint Web Server Fingerprint Scan rev 6 2010-09-20
snort ET ATTACK_RESPONSE Weak Netbios Lanman Auth Challenge Detected rev 10 2010-09-20
snort ET WEB_SPECIFIC_APPS ASPMForum SQL Injection Attempt -- forum.asp baslik UNION SELECT rev 7 2010-09-19
snort ET TROJAN Waledac Beacon Traffic Detected rev 3 2010-09-16
snort ET SCAN Nessus User Agent rev 12 2010-09-15
snort ET ATTACK_RESPONSE x2300 phpshell detected rev 6 2010-09-13
snort ET WEB_SERVER PHP Scan Precursor rev 3 2010-09-11
snort ET WEB_SERVER Possible Cisco PIX/ASA HTTP Web Interface HTTP Response Splitting Attempt rev 3 2010-09-11
snort ET WEB_SERVER Attack Tool Revolt Scanner rev 56 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL xp_readerrorlogs Stored Procedure Via URI to View Error Logs rev 5 2010-09-09
snort ET WEB_SERVER SHOW CHARACTER SET SQL Injection Attempt in URI rev 3 2010-09-09
snort ET WEB_SERVER SQL sp_delete_alert attempt rev 5 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL xp_cmdshell Stored Procedure Via URI rev 5 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL xp_enumerrorlogs Stored Procedure Via URI to View Error Logs rev 5 2010-09-09
snort ET WEB_SERVER SQL sp_password attempt rev 5 2010-09-09
snort ET WEB_SERVER SHOW TABLES SQL Injection Attempt in URI rev 3 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL xp_fileexist Stored Procedure Via URI to Locate Files On Disk rev 5 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL sp_adduser Stored Procedure Via URI to Create New Database User rev 5 2010-09-09
snort ET WEB_SERVER SQL sp_start_job attempt rev 5 2010-09-09
snort ET WEB_SERVER Possible Cisco Subscriber Edge Services Manager Cross Site Scripting/HTML Injection Attempt rev 3 2010-09-08
snort ET WEB_SERVER Possible Cisco ASA Appliance Clientless SSL VPN HTML Rewriting Security Bypass Attempt/Cross Site Scripting Attempt rev 4 2010-09-08
snort ET WEB_SPECIFIC_APPS ASPApps.com Template Creature media_level.asp mcatid parameter SQL Injection rev 4 2010-09-07
snort ET ACTIVEX Adobe browser document ActiveX DoS Attempt rev 4 2010-09-06
snort ET WEB_SPECIFIC_APPS Alan Ward A-Cart Pro SQL Injection Attempt -- product.asp productid INSERT rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activeNews_comments.asp articleID INSERT rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activeNews_comments.asp articleID DELETE rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activenews_view.asp articleID UNION SELECT rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activenews_view.asp articleID DELETE rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS AjaxPortal ajaxp_backend.php page Parameter SQL Injection rev 4 2010-09-06
snort ET WEB_SPECIFIC_APPS Possible Achievo userid= Variable UNION SELECT SQL Injection Attempt rev 3 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activeNews_categories.asp catID UPDATE rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS AdaptWeb a_index.php CodigoDisciplina Parameter Remote SQL Injection rev 5 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activenews_search.asp query SELECT rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS All In One Control Panel poll_id parameter SQL Injection rev 4 2010-09-06
snort ET WEB_SPECIFIC_APPS Aktueldownload Haber script SQL Injection Attempt -- HaberDetay.asp id UPDATE rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activeNews_comments.asp articleID SELECT rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activenews_view.asp articleID SELECT rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activenews_search.asp query UNION SELECT rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS Alan Ward A-Cart Pro SQL Injection Attempt -- product.asp productid UNION SELECT rev 6 2010-09-06
snort ET WEB_SPECIFIC_APPS Possible Achievo userid= Variable UPDATE SET SQL Injection Attempt rev 3 2010-09-06