Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata GPL NETBIOS DCERPC invalid bind attempt rev 6 2024-03-08
suricata GPL SQL xp_cmdshell program execution rev 8 2024-03-08
suricata GPL FTP RNTO overflow attempt rev 9 2024-03-08
suricata ET PHISHING Phishing Landing Page - Excel Purchase Order Form rev 2 2024-03-08
suricata GPL FTP MKD overflow attempt rev 12 2024-03-08
suricata GPL SQL sp_start_job - program execution rev 7 2024-03-08
suricata GPL MISC CVS invalid user authentication response rev 6 2024-03-08
suricata GPL MISC CVS missing cvsroot response rev 4 2024-03-08
suricata GPL IMAP EXPLOIT partial body overflow attempt rev 11 2024-03-08
suricata GPL P2P BitTorrent announce request rev 8 2024-03-08
suricata GPL FTP MKD overflow rev 14 2024-03-08
suricata GPL NETBIOS SMB DCERPC Workstation Service unicode bind attempt rev 8 2024-03-08
suricata GPL EXPLOIT ISAPI .idq access rev 14 2024-03-08
suricata GPL FTP DELE overflow attempt rev 10 2024-03-08
suricata ET MALWARE Win32/RisePro CnC Server Response M5 rev 3 2024-03-08
suricata GPL EXPLOIT ISAPI .ida attempt rev 15 2024-03-08
suricata GPL CHAT MSN user search rev 3 2024-03-08
suricata GPL FTP invalid MDTM command attempt rev 9 2024-03-08
suricata ET WEB_CLIENT Tech Support Scam - Windows Firewall M2 2021-08-17 rev 2 2024-03-08
suricata GPL FTP SITE NEWER overflow attempt rev 9 2024-03-08
suricata GPL NETBIOS SMB repeated logon failure rev 5 2024-03-08
suricata ET MALWARE Agrius Group Webshell Command Execution Attempt rev 2 2024-03-08
suricata GPL EXPLOIT xp_sprintf possible buffer overflow rev 11 2024-03-08
suricata GPL FTP PASS overflow attempt rev 19 2024-03-08
suricata GPL CHAT Jabber/Google Talk Incoming Message rev 4 2024-03-08
suricata GPL RPC portmap sadmind request TCP rev 12 2024-03-08
suricata GPL NETBIOS NT NULL session rev 12 2024-03-08
suricata ET SCADA [nsacyber/ELITEWOLF] Siemens S7 Redpoint NSE Request CPU Function Read SZL attempt rev 2 2024-03-08
suricata GPL WEB_SERVER viewcode access rev 13 2024-03-08
suricata GPL RPC sadmind query with root credentials attempt TCP rev 6 2024-03-08
suricata GPL MISC rsh root rev 7 2024-03-08
suricata GPL SQL sa brute force failed login unicode attempt rev 5 2024-03-08
suricata GPL EXPLOIT cmd? access rev 13 2024-03-08
suricata GPL RPC portmap ttdbserv request TCP rev 20 2024-03-08
suricata ET MALWARE HTTPTool User-Agent rev 3 2024-03-08
suricata ET MALWARE Webshell Landing Outbound - Possibly Iran-based rev 2 2024-03-08
suricata GPL FTP USER overflow attempt rev 37 2024-03-08
suricata GPL WEB_SERVER service.cnf access rev 14 2024-03-08
suricata GPL INFO PCAnywhere Failed Login rev 6 2024-03-08
suricata GPL NETBIOS SMB-DS repeated logon failure rev 5 2024-03-08