Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE US-CERT TA14-353A Lightweight Backdoor 5 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Nitrotech members.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.co.com.au domain rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Galerie ShowGallery.php SQL Injection attempt rev 11 2024-03-06
suricata ET ACTIVEX SaschArt SasCam Webcam Server ActiveX Control Head Method Buffer Overflow Attempt rev 3 2024-03-06
suricata ET ADWARE_PUP SurfAccuracy.com Spyware Updating rev 8 2024-03-06
suricata ET MALWARE Backdoor Win32/Hupigon.CK Client Checkin rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS zeeproperty adid Parameter Remote SQL Injection rev 7 2024-03-06
suricata ET WEB_SERVER SQL sp_start_job attempt rev 8 2024-03-06
suricata ET EXPLOIT Possible dlink-DSL2640B DNS Change Attempt rev 5 2024-03-06
suricata ET MALWARE Linux/dtool IRC Command Complete 2 rev 5 2024-03-06
suricata ET MALWARE MS Remote Desktop edc User Login Request rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS ReVou Micro Blogging user_updates.php user Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.us.tf domain rev 6 2024-03-06
suricata ET MALWARE Win32/Neutrino Bot Fake 404 Checkin Response rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Kalptaru Infotech Automated Link Exchange Portal cat_id Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE ISRStealer Checkin rev 9 2024-03-06
suricata ET MALWARE Linux.Trojan.IptabLex Variant Checkin rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS MyioSoft EasyBookMarker Parent parameter SQL Injection rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS Demium CMS tracking.php follow_kat Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS AjaxPortal ajaxp_backend.php page Parameter SQL Injection rev 8 2024-03-06
suricata ET DOS Terse HTTP GET Likely AnonMafiaIC DDoS tool rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS DeluxeBB misc.php qorder Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Miniduke Checkin rev 8 2024-03-06
suricata ET SCAN Paros Proxy Scanner Detected rev 10 2024-03-06
suricata ET INFO Kindle Fire Browser User-Agent Outbound rev 6 2024-03-06
suricata ET MALWARE IOS.Oneclickfraud HTTP Host rev 4 2024-03-06
suricata ET MALWARE Trojan-Dropper.Win32.StartPage.dvm or Mebromi Bios Rootkit CnC Count Checkin rev 8 2024-03-06
suricata ET INFO Hotmail Compose Message Access rev 6 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass fw_sys_up.cgi rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz results_table_web.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET SCAN Springenwerk XSS Scanner User-Agent Detected rev 7 2024-03-06
suricata ET EXPLOIT_KIT Bleeding Life 2 GPLed Exploit Pack payload download rev 6 2024-03-06
suricata ET ACTIVEX 4XEM VatDecoder VatCtrl Class ActiveX Control Url Property Buffer Overflow Vulnerability rev 9 2024-03-06
suricata ET WEB_SERVER Possible WebLogic Admin Login With Default Creds rev 6 2024-03-06
suricata ET MALWARE Bifrose Response from Controller rev 5 2024-03-06
suricata ET ACTIVEX Dell Webcam CrazyTalk ActiveX Control BackImage Access Potential Buffer Overflow Attempt rev 4 2024-03-06
suricata ET EXPLOIT_KIT Evil Redirector Leading To EK Sep 30 2015 rev 4 2024-03-06
suricata ET WEB_SERVER Onmouseover= in URI - Likely Cross Site Scripting Attempt rev 9 2024-03-06
suricata ET WEB_CLIENT Obfuscated Javascript // ptth rev 7 2024-03-06