Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE ATTACKER IRCBot - netsh - PRIVMSG Command rev 5 2024-03-06
suricata ET INFO HTTP Request to a *.at.tf domain rev 6 2024-03-06
suricata ET MALWARE KeyBoy Backdoor Login rev 3 2024-03-06
suricata ET INFO myobfuscate.com Encoded Script Calling home rev 7 2024-03-06
suricata ET MALWARE Backdoor.Win32.Aldibot.A Checkin rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS JobHut browse.php pk Parameter SQL Injection rev 8 2024-03-06
suricata ET ACTIVEX Viscom Movie Player Pro SDK ActiveX DrawText method Buffer Overflow Function Call rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS PHPStore Wholesales id Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.bg.tf domain rev 6 2024-03-06
suricata ET EXPLOIT PCMan FTP Server 2.0.7 Remote Command Execution rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro rubrika.php idr Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter users.php idu Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT Possible Misfortune Cookie RomPager Server banner rev 4 2024-03-06
suricata ET MALWARE Poweliks Clickfraud CnC M3 rev 5 2024-03-06
suricata ET INFO HTTP Request to a *.cz.tf domain rev 5 2024-03-06
suricata ET MALWARE Darkshell.A Checkin XOR C0 Win XP rev 3 2024-03-06
suricata ET MALWARE x0Proto Download Cmd rev 3 2024-03-06
suricata ET MALWARE Possible Tracur.Q HTTP Communication rev 5 2024-03-06
suricata ET INFO HTTP Request to a *.dtdns.net domain rev 7 2024-03-06
suricata ET MALWARE ISRStealer Checkin rev 9 2024-03-06
suricata ET SMTP Abuseat.org Block Message rev 5 2024-03-06
suricata ET EXPLOIT TP-LINK TL-WR750N DNS Change GET Request rev 5 2024-03-06
suricata ET EXPLOIT Exim/Dovecot Possible MAIL FROM Command Execution rev 4 2024-03-06
suricata ET MALWARE Win32/Fareit Checkin 2 rev 9 2024-03-06
suricata ET EXPLOIT_KIT TDS Sutra - request in.cgi rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Possible Rentventory SQL Injection Attempt rev 10 2024-03-06
suricata ET SCAN Stompy Web Application Session Scan rev 5 2024-03-06
suricata ET SCAN MYSQL MySQL Remote FAST Account Password Cracking rev 6 2024-03-06
suricata ET MALWARE EvilGrab/Vidgrab Checkin rev 4 2024-03-06
suricata ET WEB_CLIENT Obfuscated Javascript // ptth rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS DevelopItEasy News And Article aid parameter SQL Injection rev 8 2024-03-06
suricata ET INFO Nessus Vulnerability Scanner Plugins Update rev 7 2024-03-06
suricata ET SCAN Springenwerk XSS Scanner User-Agent Detected rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Joomla Full Path Disclosure -- content.php rev 9 2024-03-06
suricata ET SCAN MYSQL 4.1 brute force root login attempt rev 5 2024-03-06
suricata ET EXPLOIT_KIT Redirect to DotkaChef EK Landing rev 6 2024-03-06
suricata ET MALWARE DirectsX Checkin Response rev 4 2024-03-06
suricata ET EXPLOIT xp_readerrorlogs access rev 6 2024-03-06
suricata ET MALWARE Win32.UFRStealer.A issuing MKD command FTP rev 7 2024-03-06
suricata ET INFO MS Remote Desktop POS User Login Request rev 2 2024-03-06