Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Andy PHP Knowledgebase SQL Injection Attempt pdfgen.php pdfa INSERT rev 4 2020-04-19
suricata ET WEB_SPECIFIC_APPS Constructr CMS SQL Injection Attempt -- constructrXmlOutput.content.xml.php page_id UNION SELECT rev 4 2020-04-19
suricata ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script SELECT FROM SQL Injection Attempt rev 4 2020-04-19
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER WSO 2.6 Webshell Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server rev 2 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID UNION SELECT rev 9 2020-04-17
suricata ET WEB_CLIENT WSO 2.6 Webshell Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentmail DELETE rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentname INSERT rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentname DELETE rev 9 2020-04-17
suricata ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentmail UPDATE rev 8 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentname UPDATE rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentname UNION SELECT rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID UPDATE rev 9 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite UNION SELECT rev 8 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite DELETE rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite UPDATE rev 8 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentmail UNION SELECT rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id UNION SELECT rev 9 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentmail SELECT rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id UPDATE rev 9 2020-04-17
suricata ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17