Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Coral Web Proxy/Content Distribution Net Use rev 3 2024-03-06
suricata ET INFO Hotmail Message Access rev 6 2024-03-06
suricata ET CHAT Facebook Chat using XMPP rev 5 2024-03-06
suricata ET MALWARE x0Proto Ping rev 3 2024-03-06
suricata ET ADWARE_PUP Trinityacquisitions.com and Maximumexperience.com Spyware Activity rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro rub.php idr Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO external cPanel password change rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Miva Merchant Cross Site Scripting Attack rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS DevelopItEasy Photo Gallery cat_id parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Hubscript XSS Attempt rev 8 2024-03-06
suricata ET INFO Hotmail Access Full Mode rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Horde XSS attempt passwd/main.php rev 10 2024-03-06
suricata ET WEB_SPECIFIC_APPS WordPress Newsletter Plugin newsletter Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.de.tf domain rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Beerwins PHPLinkAdmin edlink.php linkid Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS GS Real Estate Portal email.php AgentID Parameter SQL Injection rev 8 2024-03-06
suricata ET INFO HTTP Request to a *.co.tv domain rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS SAP Possible CTC Auth/HTTP Verb Bypass Attempt rev 5 2024-03-06
suricata ET EXPLOIT PWDump4 Password dumping exe copied to victim rev 4 2024-03-06
suricata ET MALWARE Yoda's Protector Packed Binary - VERY Likely Hostile rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Online Grades parents.php ADD Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Backdoor.Win32.Fynloski.A/DarkRat Checkin Outbound rev 11 2024-03-06
suricata ET WEB_SERVER SQL sp_password attempt rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS nicLOR CMS-School showarticle.php aID Parameter SQL Injection rev 7 2024-03-06
suricata ET SMTP Possible ComputerCop Log Transmitted via SMTP rev 4 2024-03-06
suricata ET WEB_SERVER cmd.exe In URI - Possible Command Execution Attempt rev 9 2024-03-06
suricata ET INFO HTTP Request to a *.nl.ai domain rev 6 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - netsh - PRIVMSG Command rev 5 2024-03-06
suricata ET MALWARE Limitless Logger Sending Data over SMTP 2 rev 3 2024-03-06
suricata ET MALWARE APT_NGO_wuaclt C2 Check-in rev 5 2024-03-06
suricata ET INFO PsExec service created rev 4 2024-03-06
suricata ET EXPLOIT Possible CVE-2014-6271 Attempt Against SIP Proxy rev 4 2024-03-06
suricata ET MALWARE Possible Win32/Napolar.A URL Response rev 4 2024-03-06
suricata ET INFO HTTP Request to a *.at.tf domain rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro rubrika.php idr Parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT PCMan FTP Server 2.0.7 Remote Command Execution rev 4 2024-03-06
suricata ET SCAN Netsparker Scan in Progress rev 9 2024-03-06
suricata ET INFO HTTP Request to a *.be.ma domain rev 5 2024-03-06
suricata ET MALWARE Win32/Dofoil.L Checkin rev 6 2024-03-06
suricata ET INFO HTTP Request to a *.pl.tf domain rev 6 2024-03-06