Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET P2P Phatbot Control Connection rev 6 2010-07-30
snort ET POLICY Cisco Device New Config Built rev 9 2010-07-30
snort ET POLICY Google Talk TLS Client Traffic rev 4 2010-07-30
snort ET P2P BitTorrent Announce rev 6 2010-07-30
snort ET P2P Soulseek Filesearch Results rev 6 2010-07-30
snort ET SCAN Potential SSH Scan OUTBOUND rev 6 2010-07-30
snort ET TROJAN Banker Trojan CnC AddNew Command rev 3 2010-07-30
snort ET POLICY RemoteControlX rctrlx service created rev 2 2010-07-30
snort ET CHAT GaduGadu Chat Receive Message rev 3 2010-07-30
snort ET CHAT ICQ Status Invisible rev 5 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter UNION SELECT SQL Injection Attempt rev 2 2010-07-30
snort ET P2P GnucDNA UDP Ultrapeer Traffic rev 3 2010-07-30
snort ET SCAN Amap TCP Service Scan Detected rev 2 2010-07-30
snort ET P2P Ares Server Connection rev 3 2010-07-30
snort ET P2P TOR 1.0 Server Key Retrieval rev 6 2010-07-30
snort ET FTP Possible FTP Daemon Username INTO OUTFILE SQL Injection Attempt rev 2 2010-07-30
snort ET P2P TOR 1.0 Outbound Circuit Traffic rev 5 2010-07-30
snort ET EXPLOIT libPNG - Possible integer overflow in allocation in png_handle_sPLT rev 9 2010-07-30
snort ET TROJAN Conficker/MS08-067 Worm Traffic Outbound rev 6 2010-07-30
snort ET FTP Possible FTP Daemon Username UNION SELECT SQL Injection Attempt rev 2 2010-07-30
snort ET TFTP Outbound TFTP Data Transfer rev 3 2010-07-30
snort ET CHAT ICQ Login rev 5 2010-07-30
snort ET POLICY Cisco Device in Config Mode rev 9 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter INSERT INTO SQL Injection Attempt rev 2 2010-07-30
snort ET VOIP REGISTER Message Flood TCP rev 5 2010-07-30
snort ET FTP Possible FTP Daemon Username SELECT FROM SQL Injection Attempt rev 2 2010-07-30
snort ET GAMES Gold VIP Club Casino Client in Use rev 5 2010-07-30
snort ET VOIP Multiple Unauthorized SIP Responses TCP rev 6 2010-07-30
snort ET P2P Manolito Ping rev 3 2010-07-30
snort ET P2P Kazaa over UDP rev 5 2010-07-30
snort ET CHAT Facebook Chat using XMPP rev 4 2010-07-30
snort ET TFTP Outbound TFTP Error Message rev 3 2010-07-30
snort ET CHAT GaduGadu Chat Server Available Status Packet rev 3 2010-07-30
snort ET POLICY HSRP Active Router Changed rev 2 2010-07-30
snort ET POLICY Dameware Remote Control Service Install rev 5 2010-07-30
snort ET TROJAN Backdoor.Win32.VB.brg C&C Checkin rev 5 2010-07-30
snort ET TROJAN Perfect Keylogger FTP Initial Install Log Upload rev 3 2010-07-30
snort ET TROJAN Conficker.b Shellcode rev 6 2010-07-30
snort ET TROJAN SC-KeyLog Keylogger Installed - Sending Log Email Report rev 2 2010-07-30
snort ET VOIP INVITE Message Flood TCP rev 4 2010-07-30