Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS WordPress Newsletter Plugin newsletter Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO Unsupported/Fake FireFox Version 0. rev 6 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - reg - PRIVMSG Command rev 5 2024-03-06
suricata ET MALWARE Backdoor Win32/Hupigon.CK Server Checkin rev 2 2024-03-06
suricata ET ADWARE_PUP overtls.com adware request rev 6 2024-03-06
suricata ET EXPLOIT Possible Misfortune Cookie RomPager Server banner rev 4 2024-03-06
suricata ET INFO Coral Web Proxy/Content Distribution Net Use rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS AvailScript Photo Album Script pics.php sid Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Trojan.APT.9002 CnC Traffic rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS RS-CMS rscms_mod_newsview.php key Parameter Processing Remote SQL Injection rev 7 2024-03-06
suricata ET MALWARE Known Sinkhole Response Header CERT.PL rev 5 2024-03-06
suricata ET INFO HTTP Request to a *.be.ma domain rev 5 2024-03-06
suricata ET ADWARE_PUP Win32/Toolbar.CrossRider.A Checkin rev 7 2024-03-06
suricata ET WEB_SERVER Possible WebLogic Monitor Login With Default Creds rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Vlog System note parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.bg.tf domain rev 6 2024-03-06
suricata ET MALWARE Win32/MultiPasswordRecovery.A cs-crash PWS rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Plogger plog-download.php checked Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO IRC Nick change on non-standard port rev 18 2024-03-06
suricata ET SNMP Attempted TCP Access Attempt to Cisco IOS 12.1 Hidden Read/Write Community String cable-docsis rev 3 2024-03-06
suricata ET EXPLOIT_KIT Bleeding Life 2 GPLed Exploit Pack exploit request rev 6 2024-03-06
suricata ET INFO Unsupported/Fake Internet Explorer Version MSIE 2. rev 7 2024-03-06
suricata ET MALWARE DDoS.XOR Checkin rev 4 2024-03-06
suricata ET MOBILE_MALWARE iOS/Xsser Checkin rev 4 2024-03-06
suricata ET INFO InstallIQ Updater Software request rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Kalptaru Infotech Product Sale Framework customer.forumtopic.php forum_topic_id parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE IRC Channel join on non-standard port rev 13 2024-03-06
suricata ET INFO external cPanel login rev 4 2024-03-06
suricata ET MALWARE Backdoor.Win32.Xtrat Checkin 2 rev 6 2024-03-06
suricata ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 3 rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS DeltaScripts PHP Classifieds siteid parameter Remote SQL Injection rev 7 2024-03-06
suricata ET MALWARE FinFisher Malware Connection Handshake rev 3 2024-03-06
suricata ET MALWARE Shady RAT Get File Command rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Joomla Full Path Disclosure -- ldap.php rev 9 2024-03-06
suricata ET MALWARE DDoS.XOR Checkin 3 rev 4 2024-03-06
suricata ET MALWARE Shady RAT Put File Command rev 3 2024-03-06
suricata ET EXPLOIT Possible OpenVPN CVE-2014-6271 attempt rev 4 2024-03-06
suricata ET MALWARE Pony Loader default URI struct rev 7 2024-03-06
suricata ET GAMES MINECRAFT Server response inbound rev 2 2024-03-06
suricata ET MALWARE Possible APT-12 Related C2 rev 4 2024-03-06