Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS 2FLY Gift Delivery 2fly_gift.php gameid Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE IRC Private message on non-standard port rev 18 2024-03-06
suricata ET INFO IRC DCC file transfer request on non-std port rev 14 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 4 rev 3 2024-03-06
suricata ET INFO Unsupported/Fake Internet Explorer Version MSIE 1. rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Turnkeyforms Software Directory showcategory.php cid parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT_KIT SUSPICIOUS JAR Download by Java UA with non JAR EXT matches various EKs rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS icash Click&BaneX user_menu.asp ID parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS e107 resetcore.php SQL Injection attempt rev 9 2024-03-06
suricata ET EXPLOIT FritzBox RCE POST Request rev 6 2024-03-06
suricata ET MALWARE CryptoLocker EXE Download rev 7 2024-03-06
suricata ET MALWARE Win32/Xtrat C2 Response rev 3 2024-03-06
suricata ET MALWARE Georbot initial checkin rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS E-Shop Shopping Cart Script search_results.php SQL Injection rev 8 2024-03-06
suricata ET ADWARE_PUP BetterInstaller rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz num_questions.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET P2P Bittorrent P2P Client HTTP Request rev 9 2024-03-06
suricata ET MALWARE Win32/Small.XR Checkin 2 WEBC2-CSON APT1 Related rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Pre Podcast Portal tour.php id SQL Injection rev 7 2024-03-06
suricata ET MALWARE Trojan.Win32.Yakes.pwo Checkin rev 5 2024-03-06
suricata ET MALWARE IRC DCC chat request on non-standard port rev 12 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro galeri_info.php ida Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.pl.tf domain rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Maran PHP Shop id Parameter Remote SQL Injection rev 8 2024-03-06
suricata ET SCAN SQLNinja MSSQL User Scan rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz high_score_web.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS SHOP-INET show_cat2.php grid Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SERVER cmd.exe In URI - Possible Command Execution Attempt rev 9 2024-03-06
suricata ET MOBILE_MALWARE iOS/Xsser Checkin rev 4 2024-03-06
suricata ET MALWARE IRC Channel join on non-standard port rev 13 2024-03-06
suricata ET FTP Outbound Java Downloading jar over FTP rev 4 2024-03-06
suricata ET SCAN Netsparker Scan in Progress rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro rubrika.php idr Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Pony Loader default URI struct rev 7 2024-03-06
suricata ET SCAN SQLNinja Attempt To Recreate xp_cmdshell Using sp_configure rev 6 2024-03-06
suricata ET INFO external cPanel login rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Plogger plog-download.php checked Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Possible APT-12 Related C2 rev 4 2024-03-06
suricata ET GAMES MINECRAFT Server response inbound rev 2 2024-03-06
suricata ET EXPLOIT Possible Pure-FTPd CVE-2014-6271 attempt rev 3 2024-03-06