Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Lito Lite CMS cate.php cid parameter Remote SQL Injection rev 9 2024-03-06
suricata ET WEB_SERVER SQL sp_password attempt rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Beerwins PHPLinkAdmin edlink.php linkid Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL AllowStaticMethodAccess in client body rev 5 2024-03-06
suricata ET WEB_SERVER WEB-PHP phpinfo access rev 6 2024-03-06
suricata ET MALWARE Poweliks Clickfraud CnC M3 rev 5 2024-03-06
suricata ET INFO request for hide-my-ip.com autoupdate rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Community CMS view.php article_id Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SERVER Wordpress Login Bruteforcing Detected rev 6 2024-03-06
suricata ET MALWARE Possible Tracur.Q HTTP Communication rev 5 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL Java WriteFile in URI rev 5 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass switch_boot.cgi rev 5 2024-03-06
suricata ET SCAN Wikto Scan rev 10 2024-03-06
suricata ET WEB_SPECIFIC_APPS JCE Joomla Extension rev 6 2024-03-06
suricata ET INFO Possible IP Check api.ipify.org rev 5 2024-03-06
suricata ET MALWARE Backdoor Win32/Hupigon.CK Server Checkin rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz question.php order_number Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS NewSolved newsscript.php newsid Parameter SQL Injection rev 10 2024-03-06
suricata ET WEB_SPECIFIC_APPS Tours Manager cityview.php cityid Parameter SQL Injection rev 7 2024-03-06
suricata ET ACTIVEX Visagesoft eXPert PDF Viewer ActiveX Control Arbitrary File Overwrite rev 4 2024-03-06
suricata ET INFO External Unencrypted Connection to BASE Console rev 6 2024-03-06
suricata ET MALWARE Trojan.Generic.5325921 Checkin rev 5 2024-03-06
suricata ET MALWARE Backdoor.Win32.Aldibot.A Checkin rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS PHPStore Wholesales id Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.ru.tf domain rev 6 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - reg - PRIVMSG Command rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS WSN Guest search.php search parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Secure-Soft.Stealer Checkin rev 5 2024-03-06
suricata ET ACTIVEX Viscom Movie Player Pro SDK ActiveX DrawText method Buffer Overflow Function Call rev 3 2024-03-06
suricata ET SCAN FHScan core User-Agent Detect rev 7 2024-03-06
suricata ET MALWARE Backdoor.Win32.Sykipot Put rev 4 2024-03-06
suricata ET DOS Terse HTTP GET Likely AnonGhost DDoS tool rev 3 2024-03-06
suricata ET MALWARE Shady RAT Retrieve and Execute Command rev 3 2024-03-06
suricata ET VOIP Possible Misuse Call from Cisco ooh323 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS cfagcms right.php title Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO Splashtop Remote Control Session Keepalive Response rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter users.php idu Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter contacts.php idc Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 5 rev 3 2024-03-06
suricata ET MALWARE Georbot requesting update rev 4 2024-03-06