Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible zlib Remote File Inclusion Attempt rev 6 2020-04-20
suricata ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script UPDATE SET SQL Injection Attempt rev 3 2020-04-20
suricata ET SCAN NMAP SQL Spider Scan rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter INSERT INTO SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter UPDATE SET SQL Injection Attempt rev 3 2020-04-20
suricata ET MALWARE W32 Bamital or Backdoor.Win32.Shiz CnC Communication rev 4 2020-04-20
suricata ET SCAN Possible SQLMAP Scan rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo N-Myndir SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET MALWARE Troxen Downloader Checkin rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET MALWARE Gootkit Checkin User-Agent 2 rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Community component userid parameter DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Wordpress plugin Flash Album Gallery pid Parameter INSERT INTO SQL Injection Attempt rev 3 2020-04-20
suricata ET MALWARE W32.Qakbot Request for Compromised FTP Sites rev 3 2020-04-20
suricata ET MALWARE Win32/FakeSysdef Rogue AV Checkin rev 10 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Component com_hello UNION SELECT SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS I-Escorts Directory country_id parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script SELECT FROM SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Component com_hello UPDATE SET SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla Community component userid parameter UNION SELECT SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SERVER PHP Possible ftp Remote File Inclusion Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS WordPress DB XML dump attempted access rev 3 2020-04-20
suricata ET MOBILE_MALWARE SslCrypt Server Communication rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter SELECT FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET MALWARE Win32.Genome Initial Checkin rev 3 2020-04-20
suricata ET INFO OS X Software Update Request Outbound rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo Zorder zorder Parameter SELECT FROM SQL Injection Vulnerability rev 6 2020-04-20
suricata ET WEB_SPECIFIC_APPS Immophp annonce parameter DELETE FROM SQL Injection Attempt rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo N-Myndir UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla com_dshop Component UPDATE SET SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter DELETE FROM SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Mambo N-Myndir INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS Joomla virtuemart Blind SQL Injection Attempt rev 5 2020-04-20
suricata ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script INSERT INTO SQL Injection Attempt rev 4 2020-04-20
suricata ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script UPDATE SET SQL Injection Attempt rev 3 2020-04-20
suricata ET INFO Smilebox Software/Adware Checkin rev 4 2020-04-20
suricata ET MOBILE_MALWARE XML Style POST Of IMSI International Mobile Subscriber Identity rev 3 2020-04-20
suricata ET WEB_SPECIFIC_APPS KLINK txtCodiInfo parameter UPDATE SET SQL Injection Attempt rev 4 2020-04-20