Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET NETBIOS SMB Trans2 Query_Fs_Attribute_Info SrvSmbQueryFsInformation Pool Buffer Overflow rev 4 2024-03-06
suricata ET INFO EXE - Served Attached HTTP rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS DeZine DZcms products.php pcat parameter SQL injection rev 8 2024-03-06
suricata ET MALWARE Win32/Xtrat C2 Response rev 3 2024-03-06
suricata ET MALWARE CryptoLocker EXE Download rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Pre Podcast Portal tour.php id SQL Injection rev 7 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 4 rev 3 2024-03-06
suricata ET MALWARE IRC Private message on non-standard port rev 18 2024-03-06
suricata ET WEB_SPECIFIC_APPS AdaptWeb a_index.php CodigoDisciplina Parameter Remote SQL Injection rev 8 2024-03-06
suricata ET WEB_SERVER Possible DD-WRT Metacharacter Injection Command Execution Attempt rev 10 2024-03-06
suricata ET EXPLOIT Belkin G F5D7230-4 Router DNS Change GET Request rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Cyphor show.php SQL injection attempt rev 10 2024-03-06
suricata ET WEB_SPECIFIC_APPS SFS EZ Hotscripts-like Site software-description.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS e107 resetcore.php SQL Injection attempt rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS Possible Joomla Com_joomlub Component Union Select SQL Injection rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS E-Shop Shopping Cart Script search_results.php SQL Injection rev 8 2024-03-06
suricata ET WEB_SERVER Possible WebLogic Operator Login With Default Creds rev 4 2024-03-06
suricata ET INFO Telnet to HP JetDirect Printer With No Password Set rev 5 2024-03-06
suricata ET EXPLOIT_KIT SUSPICIOUS JAR Download by Java UA with non JAR EXT matches various EKs rev 5 2024-03-06
suricata ET WEB_SERVER c99 Shell Backdoor Var Override URI rev 5 2024-03-06
suricata ET ADWARE_PUP BetterInstaller rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz num_questions.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS icash Click&BaneX user_menu.asp ID parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT FritzBox RCE POST Request rev 6 2024-03-06
suricata ET SCAN SFTP/FTP Password Exposure via sftp-config.json rev 5 2024-03-06
suricata ET DOS Terse HTTP GET Likely AnonGhost DDoS tool rev 3 2024-03-06
suricata ET MALWARE KeyBoy Backdoor Login rev 3 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL AllowStaticMethodAccess in client body rev 5 2024-03-06
suricata ET MALWARE Win32/Dofoil.L Checkin rev 6 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL Java WriteFile in URI rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS AvailScript Photo Album Script pics.php sid Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS SAP Possible CTC Auth/HTTP Verb Bypass Attempt rev 5 2024-03-06
suricata ET MALWARE Backdoor.Win32.Sykipot Put rev 4 2024-03-06
suricata ET SCAN SQLNinja MSSQL Authentication Mode Scan rev 7 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 3 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS NewSolved newsscript.php newsid Parameter SQL Injection rev 10 2024-03-06
suricata ET WEB_SPECIFIC_APPS nicLOR CMS-School showarticle.php aID Parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass override.cgi rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS RealtyListings detail.asp iPro Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Backdoor.Linux.Turla Download rev 3 2024-03-06