Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata GPL DNS named authors attempt rev 9 2024-03-08
suricata GPL SQL sa login failed rev 12 2024-03-08
suricata GPL MISC Invalid PCAnywhere Login rev 7 2024-03-08
suricata GPL FTP USER overflow attempt rev 37 2024-03-08
suricata ET MALWARE W32.Geodo/Emotet Checkin Fake 404 Response rev 5 2024-03-08
suricata GPL RPC snmpXdmi overflow attempt TCP rev 16 2024-03-08
suricata GPL POP3 APOP overflow attempt rev 15 2024-03-08
suricata GPL CHAT MSN login attempt rev 4 2024-03-08
suricata GPL RPC portmap ypupdated request TCP rev 12 2024-03-08
suricata GPL WEB_SERVER globals.pl access rev 8 2024-03-08
suricata GPL SQL xp_printstatements possible buffer overflow rev 11 2024-03-08
suricata GPL EXPLOIT cmd? access rev 13 2024-03-08
suricata GPL NETBIOS xp_reg* registry access rev 13 2024-03-08
suricata GPL FTP RNFR overflow attempt rev 3 2024-03-08
suricata GPL NETBIOS SMB repeated logon failure rev 5 2024-03-08
suricata GPL WEB_SERVER python access attempt rev 12 2024-03-08
suricata ET WEB_SERVER SLIGHTPULSE WebShell Access Inbound M3 rev 2 2024-03-08
suricata GPL SCAN ssh-research-scanner rev 6 2024-03-08
suricata GPL FTP PASS overflow attempt rev 19 2024-03-08
suricata GPL WEB_SERVER viewcode access rev 13 2024-03-08
suricata GPL EXPLOIT xp_sprintf possible buffer overflow rev 11 2024-03-08
suricata ET EXPLOIT GoCD Authentication Bypass URI Path - add-on rev 2 2024-03-08
suricata GPL FTP STAT overflow attempt rev 14 2024-03-08
suricata GPL SQL sa login failed rev 11 2024-03-08
suricata GPL NETBIOS SMB-DS DCERPC Remote Activation bind attempt rev 16 2024-03-08
suricata GPL FTP invalid MDTM command attempt rev 9 2024-03-08
suricata GPL NETBIOS DOS RFPoison rev 9 2024-03-08
suricata ET MALWARE ViperSoftX CnC Activity M1 rev 3 2024-03-08
suricata GPL CHAT MSN user search rev 3 2024-03-08
suricata GPL POP3 x86 SCO overflow rev 12 2024-03-08
suricata GPL MISC CVS missing cvsroot response rev 4 2024-03-08
suricata GPL RPC portmap rstatd request TCP rev 13 2024-03-08
suricata GPL NETBIOS SMB-DS DCERPC Workstation Service bind attempt rev 9 2024-03-08
suricata GPL SQL sp_delete_alert log file deletion rev 7 2024-03-08
suricata GPL EXPLOIT iissamples access rev 10 2024-03-08
suricata GPL EXPLOIT ISAPI .ida attempt rev 15 2024-03-08
suricata ET MALWARE Win32/FFDroider CnC Activity M2 rev 3 2024-03-08
suricata GPL IMAP EXPLOIT partial body overflow attempt rev 11 2024-03-08
suricata GPL NETBIOS xp_reg* - registry access rev 12 2024-03-08
suricata ET WEB_CLIENT Tech Support Scam - Windows Firewall M2 2021-08-17 rev 2 2024-03-08