Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET USER_AGENTS Atomic_Email_Hunter User-Agent Inbound rev 5 2020-04-21
suricata ET MALWARE Lop.gfr/Swizzor HTTP Update/Checkin rev 10 2020-04-21
suricata ET MALWARE Downloader.Win32.Banload Reporting rev 5 2020-04-21
suricata ET MALWARE RegHelper Installation rev 6 2020-04-21
suricata ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter UPDATE SET SQL Injection Attempt rev 5 2020-04-21
suricata ET MALWARE Nbar.co.kr Related Trojan Checkin rev 5 2020-04-21
suricata ET WEB_SPECIFIC_APPS pfile file.php id Parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-21
suricata ET WEB_SPECIFIC_APPS RJ-iTop Network Vulnerabilities Scan System id INSERT INTO SQL Injection Attempt rev 5 2020-04-21
suricata ET MALWARE TROJAN Win32-WebSec Reporting rev 6 2020-04-21
suricata ET MALWARE Generic Dropper/Clicker Checkin rev 5 2020-04-21
suricata ET MALWARE OSX/Flashback.K first execution checkin rev 5 2020-04-21
suricata ET SCAN Vega Web Application Scan rev 4 2020-04-21
suricata ET MALWARE Common Downloader Install Count Tracking URL rev 6 2020-04-21
suricata ET EXPLOIT_KIT Sakura Exploit Kit Version 1.1 Archive Request rev 3 2020-04-21
suricata ET MALWARE OSX/Flashback.K/I reporting failed infection rev 5 2020-04-21
suricata ET MALWARE Rouge Security Software Win32.BHO.egw rev 7 2020-04-21
suricata ET MALWARE Trojan.Win32.Buzus Checkin rev 6 2020-04-21
suricata ET MALWARE Trojan.Win32.Genome.aetqe Checkin rev 2 2020-04-21
suricata ET MALWARE Common Downloader Install Report URL rev 9 2020-04-21
suricata ET MALWARE Win32 Dialer Variant rev 9 2020-04-21
suricata ET INFO Possible Web Crawl - libwww-perl User Agent rev 11 2020-04-21
suricata ET EXPLOIT_KIT Incognito Exploit Kit PDF request to images.php?t=81118 rev 3 2020-04-21
suricata ET INFO Http Client Body contains passwd= in cleartext rev 4 2020-04-21
suricata ET MALWARE Rogue.Win32/Winwebsec Checkin rev 9 2020-04-21
suricata ET MALWARE Rootkit TDSS/Alureon Checkin 2 rev 4 2020-04-21
suricata ET MALWARE Downloader General Bot Checking In - Possible Win32.Small.htz related rev 7 2020-04-21
suricata ET MALWARE W32/DelfInject.A CnC Checkin 2 rev 3 2020-04-21
suricata ET MOBILE_MALWARE Android/Plankton.P Commands Request to CnC Server rev 3 2020-04-21
suricata ET MALWARE Nebuler/Dialer.qn HTTP Request - Checkin rev 11 2020-04-21
suricata ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter DELETE FROM SQL Injection Attempt rev 4 2020-04-21
suricata ET MALWARE carberp check in rev 4 2020-04-21
suricata ET EXPLOIT_KIT Incognito Exploit Kit Java request to images.php?t= rev 3 2020-04-21
suricata ET WEB_SERVER /bin/ksh In URI Possible Shell Command Execution Attempt rev 6 2020-04-21
suricata ET MALWARE Urlzone/Bebloh Trojan Check-in rev 8 2020-04-21
suricata ET MALWARE Backdoor.Meciv Checkin rev 4 2020-04-21
suricata ET WEB_SPECIFIC_APPS PHP-Nuke SQL Injection Attempt -- modules.php pid SELECT rev 8 2020-04-21
suricata ET EXPLOIT_KIT - Landing Page Requested - 15Alpha1Digit.php rev 4 2020-04-21
suricata ET EXPLOIT_KIT Sakura Exploit Kit Landing Page Request rev 3 2020-04-21
suricata ET INFO Http Client Body contains pword= in cleartext rev 4 2020-04-21
suricata ET WEB_SPECIFIC_APPS pfile file.php id Parameter SELECT FROM SQL Injection Attempt rev 4 2020-04-21