Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS SFS EZ Hotscripts-like Site software-description.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 4 rev 3 2024-03-06
suricata ET MALWARE Possible Duqu 2.0 Accessing backdoor over 443 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS My PHP Dating id parameter SQL Injection rev 10 2024-03-06
suricata ET MALWARE IRC Channel join on non-standard port rev 13 2024-03-06
suricata ET MALWARE Pony Loader default URI struct rev 7 2024-03-06
suricata ET MALWARE DDoS.XOR Checkin rev 4 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - net localgroup - PRIVMSG Command rev 5 2024-03-06
suricata ET MALWARE DDoS.XOR Checkin 3 rev 4 2024-03-06
suricata ET EXPLOIT Tenda ADSL2/2+ Router DNS Change GET Request rev 5 2024-03-06
suricata ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 3 rev 5 2024-03-06
suricata ET NETBIOS SMB Trans2 Query_Fs_Attribute_Info SrvSmbQueryFsInformation Pool Buffer Overflow rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Plogger plog-download.php checked Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Win32/MultiPasswordRecovery.A cs-crash PWS rev 4 2024-03-06
suricata ET EXPLOIT Possible OpenVPN CVE-2014-6271 attempt rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS DMXReady Multiple Products upload_image_category.asp cid Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz question.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT xp_enumdsn access rev 6 2024-03-06
suricata ET INFO PPTP Requester is not authorized to establish a command channel rev 5 2024-03-06
suricata ET INFO EXE - Served Attached HTTP rev 9 2024-03-06
suricata ET MALWARE TROJ_PROX.AFV POST rev 12 2024-03-06
suricata ET P2P Libtorrent User-Agent rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro galeri_info.php ida Parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT_KIT Bleeding Life 2 GPLed Exploit Pack exploit request rev 6 2024-03-06
suricata ET SCAN SQLNinja Attempt To Recreate xp_cmdshell Using sp_configure rev 6 2024-03-06
suricata ET EXPLOIT Linksys WRT54GL DNS Change GET Request rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS e107 Plugin lyrics_menu lyrics_song.php l_id Parameter Remote SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Joomla Full Path Disclosure -- ldap.php rev 9 2024-03-06
suricata ET MALWARE Backdoor.Win32.DarkComet Keepalive Inbound rev 8 2024-03-06
suricata ET ADWARE_PUP Carder Card Checking Tool try2check.me SSL Certificate on Off Port rev 4 2024-03-06
suricata ET SNMP Attempted TCP Access Attempt to Cisco IOS 12.1 Hidden Read/Write Community String cable-docsis rev 3 2024-03-06
suricata ET MALWARE MS Remote Desktop micros User Login Request rev 4 2024-03-06
suricata ET INFO MS Remote Desktop POS User Login Request rev 2 2024-03-06
suricata ET MALWARE Linux/dtool IRC Command Complete 2 rev 5 2024-03-06
suricata ET WEB_SERVER SQL sp_start_job attempt rev 8 2024-03-06
suricata ET EXPLOIT Possible dlink-DSL2640B DNS Change Attempt rev 5 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - The command completed successfully - PRIVMSG Response rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Easyedit CMS news.php intPageID parameter sql injection rev 8 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL AllowStaticMethodAccess in URI rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS ReVou Micro Blogging user_updates.php user Parameter SQL Injection rev 7 2024-03-06