Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Possible Deep Panda User-Agent rev 3 2024-04-08
snort ET EXPLOIT Possible Misfortune Cookie - SET rev 2 2024-04-08
snort ET POLICY Outdated Flash Version M1 rev 123 2024-04-08
suricata ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdImport Method Access Buffer Overflow 2 rev 5 2024-04-08
suricata ET ACTIVEX Possible Camera Stream Client Possible ActiveX Control SetDirectory Method Access Buffer Overflow rev 6 2024-04-08
suricata ET ACTIVEX Possible WinZip FileView ActiveX CreateNewFolderFromName Method Access Buffer Overflow rev 4 2024-04-08
suricata ET INFO JAVA - Java Class Download rev 10 2024-04-08
suricata ET MALWARE Cridex Post to CnC rev 9 2024-04-08
suricata ET ACTIVEX 2X ApplicationServer TuxSystem Class ActiveX Control ExportSettings Function Call Attempt rev 4 2024-04-08
suricata ET ACTIVEX ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_jradio controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_CLIENT Internet Explorer CTableRowCellsCollectionCacheItem.GetNext Memory Use-After-Free Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_profile controller parameter Local File Inclusion Vulnerability rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_rule controller Local File Inclusion Attempt rev 5 2024-04-08
suricata ET INFO Compressed Executable SZDD Compress.exe Format Over HTTP rev 4 2024-04-08
suricata ET INFO EXE - OSX Executable Download - Multi Arch w/PowerPC rev 5 2024-04-08
suricata ET WEB_CLIENT PDF With Embedded U3D rev 4 2024-04-08
suricata ET ACTIVEX Possible AdminStudio Activex Control LaunchProcess Method Access Arbitrary Code Execution rev 4 2024-04-08
suricata ET INFO JAVA - Java Class Download By Vulnerable Client rev 10 2024-04-08
suricata ET ACTIVEX Possible Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability rev 4 2024-04-08
suricata ET ACTIVEX Possible IBM Rational ClearQuest Activex Control RegisterSchemaRepoFromFileByDbSet Insecure Method Access rev 4 2024-04-08
suricata ET SCADA Sunway ForceControl Activex Control Vulnerability rev 5 2024-04-08
suricata ET MALWARE Andromeda Check-in Response rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla Bsadv controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET EXPLOIT_KIT NuclearPack - Landing Page Received - applet archive=32CharHex rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress WP Custom Pages url parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_kp controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_fundhelp controller Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS OneFileCMS f parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_bch controller Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_g2bridge controller parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS MindTouch Deki Wiki deki_plugin.php Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX Possible IBM Lotus iNotes Upload Module possible ActiveX Control Attachment_Times Method Access Buffer Overflow Attempt rev 6 2024-04-08
suricata ET INFO DynDNS CheckIp External IP Address Server Response rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_jmsfileseller view parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET INFO EXE - OSX Executable Download - Intel Arch rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_mscomment controller parameter Local File Inclusion Attempt rev 7 2024-04-08
suricata ET ACTIVEX Possible Edraw Diagram Component 5 ActiveX LicenseName Access Potential buffer overflow DOS 2 rev 4 2024-04-08
suricata ET INFO Outdated Flash Version M1 rev 128 2024-04-08
suricata ET WEB_SPECIFIC_APPS 1024 CMS filename Parameter Local File Inclusion Attempt rev 5 2024-04-08