Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT Belkin G F5D7230-4 Router DNS Change GET Request rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS e107 resetcore.php SQL Injection attempt rev 9 2024-03-06
suricata ET WEB_SERVER Possible MySQL SQLi Attempt Information Schema Access rev 4 2024-03-06
suricata ET MALWARE Georbot initial checkin rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Turnkeyforms Software Directory showcategory.php cid parameter SQL Injection rev 7 2024-03-06
suricata ET ADWARE_PUP BetterInstaller rev 6 2024-03-06
suricata ET WEB_SERVER Onmouseover= in URI - Likely Cross Site Scripting Attempt rev 9 2024-03-06
suricata ET INFO Telnet to HP JetDirect Printer With No Password Set rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS SFS EZ Hotscripts-like Site software-description.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz num_questions.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Win32/Xtrat C2 Response rev 3 2024-03-06
suricata ET INFO HTTP Request to a *.ae.am domain rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS icash Click&BaneX user_menu.asp ID parameter SQL Injection rev 7 2024-03-06
suricata ET INFO Unsupported/Fake Windows NT Version 4. rev 6 2024-03-06
suricata ET WEB_SERVER SQL sp_delete_alert attempt rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro galeri_info.php lang Parameter SQL Injection rev 7 2024-03-06
suricata ET MOBILE_MALWARE iOS/Xsser sending files rev 4 2024-03-06
suricata ET INFO HTTP Request to a *.edu.tf domain rev 6 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 2 rev 3 2024-03-06
suricata ET SCAN SQLNinja Attempt To Create xp_cmdshell Session rev 6 2024-03-06
suricata ET INFO Unsupported/Fake Internet Explorer Version MSIE 3. rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Check New findoffice.php search parameter Remote SQL Injection rev 8 2024-03-06
suricata ET MALWARE Linux/BillGates Checkin Response rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS TorrentTrader Classic delreq.php categ Parameter Sql Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS ClipShare Pro channel_detail.php chid Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Backdoor.Win32.Aldibot.A Checkin rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter users.php idu Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Known Sinkhole Response Header CERT.PL rev 5 2024-03-06
suricata ET MALWARE Infostealer.Bancos Checkin via SMTP rev 3 2024-03-06
suricata ET MALWARE Backdoor.Win32.Xyligan Checkin rev 4 2024-03-06
suricata ET EXPLOIT_KIT Sutra TDS /simmetry rev 5 2024-03-06
suricata ET INFO HTTP Request to a *.ca.tf domain rev 6 2024-03-06
suricata ET MALWARE APT CozyCar SSL Cert 5 rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS ECShop user.php order_sn Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Multiple Membership Script id parameter SQL injection rev 8 2024-03-06
suricata ET INFO HTTP Request to a *.sg.tf domain rev 8 2024-03-06
suricata ET MALWARE Win32/Nitol.A Checkin rev 8 2024-03-06
suricata ET EXPLOIT TP-LINK TL-WR841N Router DNS Change GET Request rev 5 2024-03-06
suricata ET WEB_SERVER Cisco IOS HTTP Server Exec Command Execution Attempt rev 8 2024-03-06
suricata ET EXPLOIT_KIT TDS Sutra - cookie set RULEZ rev 6 2024-03-06