Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata GPL MISC CVS invalid user authentication response rev 6 2024-03-08
suricata GPL FTP RMDIR overflow attempt rev 8 2024-03-08
suricata GPL NETBIOS SMB DCERPC Workstation Service unicode bind attempt rev 8 2024-03-08
suricata ET WEB_CLIENT Tech Support Scam - Windows Firewall M2 2021-08-17 rev 2 2024-03-08
suricata GPL MISC rsh froot rev 7 2024-03-08
suricata GPL FTP CMD overflow attempt rev 13 2024-03-08
suricata GPL EXPLOIT ISAPI .ida attempt rev 15 2024-03-08
suricata ET PHISHING Phishing Landing Page - Excel Purchase Order Form rev 2 2024-03-08
suricata GPL P2P BitTorrent announce request rev 8 2024-03-08
suricata GPL RPC portmap selection_svc request TCP rev 12 2024-03-08
suricata GPL FTP DELE overflow attempt rev 10 2024-03-08
suricata GPL EXPLOIT ISAPI .idq access rev 14 2024-03-08
suricata GPL SQL sp_delete_alert log file deletion rev 7 2024-03-08
suricata ET PHISHING Successful TA399/Sidewinder Related Phish 2022-09-28 rev 2 2024-03-08
suricata GPL WEB_SERVER 403 Forbidden rev 12 2024-03-08
suricata GPL IMAP EXPLOIT partial body overflow attempt rev 11 2024-03-08
suricata ET EXPLOIT GoCD Authentication Bypass URI Path - add-on rev 2 2024-03-08
suricata GPL MISC rsh echo + + rev 7 2024-03-08
suricata GPL NETBIOS DCERPC invalid bind attempt rev 6 2024-03-08
suricata GPL RPC portmap snmpXdmi request TCP rev 20 2024-03-08
suricata GPL SCAN ssh-research-scanner rev 6 2024-03-08
suricata ET MALWARE Win32/Gamaredon CnC Activity rev 2 2024-03-08
suricata GPL FTP REST overflow attempt rev 8 2024-03-08
suricata GPL EXPLOIT xp_cmdshell - program execution rev 7 2024-03-08
suricata GPL EXPLOIT site/iisamples access rev 13 2024-03-08
suricata GPL NETBIOS RFParalyze Attempt rev 11 2024-03-08
suricata ET INFO Powershell Base64 Decode Command Inbound rev 2 2024-03-08
suricata GPL FTP passwd retrieval attempt rev 8 2024-03-08
suricata ET MALWARE ViperSoftX CnC Activity M1 rev 3 2024-03-08
suricata GPL MISC CVS non-relative path error response rev 6 2024-03-08
suricata ET WEB_SERVER SLIGHTPULSE WebShell Access Inbound M3 rev 2 2024-03-08
suricata GPL POP3 APOP USER overflow attempt rev 3 2024-03-08
suricata GPL NETBIOS SMB CD.. rev 8 2024-03-08
suricata GPL RPC portmap ypserv request TCP rev 16 2024-03-08
suricata GPL EXPLOIT Alternate Data streams ASP file access attempt rev 16 2024-03-08
suricata GPL POP3 APOP overflow attempt rev 15 2024-03-08
suricata GPL CHAT MSN login attempt rev 4 2024-03-08
suricata GPL SQL xp_printstatements possible buffer overflow rev 11 2024-03-08
suricata GPL EXPLOIT echo command attempt rev 12 2024-03-08
suricata GPL WEB_SERVER python access attempt rev 12 2024-03-08