Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET P2P Azureus P2P Client User-Agent rev 4 2010-08-25
snort ET P2P Ares traffic rev 9 2010-08-25
snort ET SCAN Mini MySqlatOr SQL Injection Scanner rev 6 2010-08-01
snort ET SCAN DavTest WebDav Vulnerability Scanner Default User Agent Detected rev 4 2010-08-01
snort ET SCAN Springenwerk XSS Scanner User-Agent Detected rev 6 2010-08-01
snort ET SCAN Pavuk User Agent Detected - Website Mirroring Tool for Off-line Analysis rev 4 2010-08-01
snort ET CHAT GaduGadu Chat File Send Request rev 3 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter DELETE FROM SQL Injection Attempt rev 2 2010-07-30
snort ET VOIP REGISTER Message Flood TCP rev 5 2010-07-30
snort ET TROJAN Backdoor.Win32.VB.brg C&C Checkin rev 5 2010-07-30
snort ET P2P TOR 1.0 Inbound Circuit Traffic rev 5 2010-07-30
snort ET POLICY Dameware Remote Control Service Install rev 5 2010-07-30
snort ET TROJAN Perfect Keylogger FTP Initial Install Log Upload rev 3 2010-07-30
snort ET TROJAN Socks666 Successful Connect Packet Packet rev 6 2010-07-30
snort ET GAMES Gold VIP Club Casino Client in Use rev 5 2010-07-30
snort ET POLICY Proxy TRACE Request - inbound rev 9 2010-07-30
snort ET TROJAN Banker Trojan CnC AddNew Command rev 3 2010-07-30
snort ET CHAT GaduGadu Chat File Send Accept rev 3 2010-07-30
snort ET TFTP Outbound TFTP Data Transfer rev 3 2010-07-30
snort ET P2P TOR 1.0 Status Update rev 5 2010-07-30
snort ET TROJAN Socks666 Connection Initial Packet rev 5 2010-07-30
snort ET CHAT GaduGadu Chat File Send Details rev 3 2010-07-30
snort ET CHAT GaduGadu Chat Keepalive PING rev 3 2010-07-30
snort ET EXPLOIT libPNG - Possible integer overflow in allocation in png_handle_sPLT rev 9 2010-07-30
snort ET SHELLCODE Rothenburg Shellcode rev 3 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter INSERT INTO SQL Injection Attempt rev 2 2010-07-30
snort ET CHAT ICQ Login rev 5 2010-07-30
snort ET TROJAN SC-KeyLog Keylogger Installed - Sending Initial Email Report rev 4 2010-07-30
snort ET FTP Possible FTP Daemon Username INTO OUTFILE SQL Injection Attempt rev 2 2010-07-30
snort ET SCAN MYSQL 4.0 brute force root login attempt rev 6 2010-07-30
snort ET CHAT GaduGadu Chat Server Login Failed Packet rev 3 2010-07-30
snort ET SCAN Potential SSH Scan OUTBOUND rev 6 2010-07-30
snort ET VOIP REGISTER Message Flood UDP rev 1 2010-07-30
snort ET WEB_CLIENT Possible Microsoft Internet Explorer URI Validation Remote Code Execution Attempt rev 3 2010-07-30
snort ET CHAT GaduGadu Chat Send Message rev 3 2010-07-30
snort ET P2P TOR 1.0 Server Key Retrieval rev 6 2010-07-30
snort ET TROJAN SC-KeyLog Keylogger Installed - Sending Log Email Report rev 2 2010-07-30
snort ET P2P GnucDNA UDP Ultrapeer Traffic rev 3 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter UNION SELECT SQL Injection Attempt rev 2 2010-07-30
snort ET SCAN Internal to Internal UPnP Request tcp port 2555 rev 3 2010-07-30