Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ACTIVEX Possible Camera Stream Client Possible ActiveX Control SetDirectory Method Access Buffer Overflow rev 6 2024-04-08
suricata ET INFO JAVA - Java Class Download rev 10 2024-04-08
suricata ET ACTIVEX ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow rev 6 2024-04-08
suricata ET ACTIVEX Possible HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Wordpress Plugins Wp-ImageZoom file parameter Remote File Disclosure Vulnerability rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_rssreader controller parameter Local File Inclusion Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla YJ Contact Local File Inclusion Vulnerability rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS wordpress thecartpress plugin loop parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS joomla com_connect controller parameter Local File Inclusion vulnerability rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_jmsfileseller view parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET INFO DynDNS CheckIp External IP Address Server Response rev 4 2024-04-08
suricata ET MALWARE W32/Coced.PasswordStealer User-Agent 5.0 rev 4 2024-04-08
suricata ET ACTIVEX Possible AOL ICQ ActiveX Control DownloadAgent Method Access Arbitrary File Download and Execute rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_hello controller parameter Local File Inclusion vulnerability rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_ckforms controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Help Center Live file parameter Local File Inclusion vulnerability rev 4 2024-04-08
suricata ET ACTIVEX Possible CA BrightStor ARCserve Backup ActiveX AddColumn Method Access Buffer Overflow rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla Appointment Booking Pro view parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Exponent file parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET INFO EXE - OSX Executable Download - Multi Arch w/Intel rev 9 2024-04-08
suricata ET MALWARE Win32/TrojanDownloader.Wauchos.A CnC Activity rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress jRSS Widget url parameter Local File Inclusion Vulnerability rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Free Blog Arbitrary File Deletion Attempt rev 6 2024-04-07
suricata ET MALWARE FakeAV security_scanner.exe rev 4 2024-04-07
suricata ET MALWARE Galock Ransomware Check-in rev 5 2024-04-07
suricata ET MALWARE W32/Siggen.Dropper CnC Beacon rev 5 2024-04-07
suricata ET MALWARE Poweliks Abnormal HTTP Headers high likelihood of Poweliks infection rev 7 2024-04-07
suricata ET MALWARE Havex RAT CnC Server Response HTML Tag rev 7 2024-04-07
suricata ET MALWARE Possible Stitur Secondary Download rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Cartweaver 3 Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Trojan-Dropper.Win32.Agent.ksja rev 7 2024-04-07
suricata ET MALWARE Downeks Checkin rev 6 2024-04-07
suricata ET MALWARE Troj/ReRol.A Checkin 2 rev 7 2024-04-07
suricata ET MALWARE Dyreza RAT Fake Server Header rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS WordPress Cloudsafe365 file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Mal/Ransom-CE Connectivity Check rev 7 2024-04-07
suricata ET MALWARE CBReplay.P Ransomware rev 5 2024-04-07
suricata ET EXPLOIT_KIT FlimKit hex.zip Java Downloading Jar rev 8 2024-04-07
suricata ET MALWARE Known Sinkhole Response Header rev 7 2024-04-07
suricata ET MALWARE [ANY.RUN] WhiteSnake Stealer HTTP Request rev 4 2024-04-07