Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Hotmail Message Access rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Vlog System note parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Sourtoff Receiving Simda Payload rev 4 2024-03-06
suricata ET MALWARE Darkshell.A Checkin XOR C0 Win XP rev 3 2024-03-06
suricata ET INFO HTTP Request to a *.cz.tf domain rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS PHPStore Wholesales id Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS JobHut browse.php pk Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SERVER /etc/shadow Detected in URI rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS NewSolved newsscript.php newsid Parameter SQL Injection rev 10 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - netsh - PRIVMSG Command rev 5 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass override.cgi rev 4 2024-03-06
suricata ET INFO HTTP Request to a .noip.cn domain rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz num_questions.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET INFO MySQL Database Query Version OS compile rev 3 2024-03-06
suricata ET MALWARE Executable Download Purporting to be JavaScript likely 2nd stage Infection rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Venalsur Booking Centre HotelID Parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT Possible Qmail CVE-2014-6271 Mail From attempt rev 4 2024-03-06
suricata ET ACTIVEX Visagesoft eXPert PDF Viewer ActiveX Control Arbitrary File Overwrite rev 4 2024-03-06
suricata ET MALWARE DDoS.XOR Checkin 2 rev 4 2024-03-06
suricata ET DOS Terse HTTP GET Likely AnonGhost DDoS tool rev 3 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL AllowStaticMethodAccess in client body rev 5 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - reg - PRIVMSG Command rev 5 2024-03-06
suricata ET INFO Unsupported/Fake FireFox Version 0. rev 6 2024-03-06
suricata ET MALWARE Win32/Neutrino Cookie rev 6 2024-03-06
suricata ET MALWARE Backdoor.Win32.Aldibot.A Checkin rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter users.php idu Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS ECShop user.php order_sn Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Backdoor.Win32.Sykipot Put rev 4 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL Java WriteFile in URI rev 5 2024-03-06
suricata ET MALWARE Infostealer.Bancos Checkin via SMTP rev 3 2024-03-06
suricata ET INFO Radmin Remote Control Session Setup Initiate OUTBOUND rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Bandwebsite lyrics.php id parameter Sql Injection rev 9 2024-03-06
suricata ET INFO External Unencrypted Connection to BASE Console rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Tours Manager cityview.php cityid Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Win32/Cutwail.BE Checkin 2 rev 4 2024-03-06
suricata ET MALWARE W32/ZxShell Server Checkin Response rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS JCE Joomla Extension rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Multiple Membership Script id parameter SQL injection rev 8 2024-03-06
suricata ET MALWARE Win32/Nitol.A Checkin rev 8 2024-03-06
suricata ET MOBILE_MALWARE iOS/Xsser sending GPS info rev 4 2024-03-06