Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SERVER Joomla Upload File Filter Bypass rev 1 2013-08-14
snort ET TROJAN SUSPICIOUS IRC - NICK and -PC rev 4 2013-08-14
snort ET ATTACK_RESPONSE python shell spawn attempt rev 2 2013-08-12
snort ET TROJAN Possible FortDisco Reporting Hacked Accounts rev 3 2013-08-12
snort ET TROJAN FortDisco Reporting Status rev 2 2013-08-12
snort ET CURRENT_EVENTS Possible FortDisco Wordpress Brute-force Site list download 10+ wp-login.php rev 2 2013-08-12
snort ET INFO Adobe PKG Download Flowbit Set rev 2 2013-08-07
snort ET WEB_SERVER - EXE File Uploaded - Hex Encoded rev 1 2013-08-07
snort ET WEB_SERVER Possible OpenX Backdoor Backdoor Access POST to flowplayer rev 2 2013-08-07
snort ET WEB_SERVER Possible Apache Struts OGNL in Dynamic Action rev 3 2013-08-07
snort ET TROJAN Win32.Rovnix.I Checkin rev 1 2013-08-06
snort ET TROJAN W32/StealRat.SpamBot Email Template Request rev 1 2013-08-05
snort ET TROJAN Comfoo Checkin rev 2 2013-08-01
snort ET WEB_SERVER WebShell Generic - ASP File Uploaded rev 10 2013-07-31
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdImport Method Access Buffer Overflow rev 3 2013-07-26
snort ET ACTIVEX Possible SkinCrafter ActiveX Control InitLicenKeys Method Access Buffer Overflow rev 4 2013-07-26
snort ET INFO JNLP embedded file rev 2 2013-07-26
snort ET ACTIVEX Possible NET-i viewer ActiveX Control ConnectDDNS Method Access Code Execution Vulnerability rev 5 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdSave Method Access Buffer Overflow 2 rev 4 2013-07-26
snort ET ACTIVEX Possible SkinCrafter ActiveX Control InitLicenKeys Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdOpen Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Possible NET-i viewer ActiveX Control ConnectDDNS Method Access Code Execution Vulnerability 2 rev 5 2013-07-26
snort ET ACTIVEX Possible LEADTOOLS ActiveX Raster Twain AppName Method Access Buffer Overflow rev 3 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdSave Method Access Buffer Overflow rev 3 2013-07-26
snort ET ACTIVEX Possible Windows Live Writer ActiveX BlogThisLink Method Access Denail of Service Attack rev 4 2013-07-26
snort ET ACTIVEX Possible Windows Live Writer ActiveX BlogThisLink Method Access Denail of Service Attack 2 rev 4 2013-07-26
snort ET ACTIVEX Possible SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control Install3rdPartyComponent Method Buffer Overflow rev 3 2013-07-26
snort ET ACTIVEX Possible NET-i viewer ActiveX Control BackupToAvi Method Access Buffer Overflow 2 rev 5 2013-07-26
snort ET ACTIVEX Possible Chilkat Software FTP2 ActiveX Component GetFile Access Remote Code Execution 2 rev 4 2013-07-26
snort ET ACTIVEX Possible IBM Lotus Quickr for Domino ActiveX control Attachment_Times Method Access buffer overflow Attempt rev 5 2013-07-26
snort ET ACTIVEX Possible LEADTOOLS ActiveX Raster Twain AppName Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Possible Chilkat Software FTP2 ActiveX Component GetFile Access Remote Code Execution rev 4 2013-07-26
snort ET ACTIVEX Possible IBM Lotus Quickr for Domino ActiveX control Import_Times Method Access buffer overflow Attempt rev 4 2013-07-26
snort ET ACTIVEX Possible NET-i viewer ActiveX Control BackupToAvi Method Access Buffer Overflow rev 6 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdImport Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdOpen Method Access Buffer Overflow rev 3 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdExport Method Access Buffer Overflow rev 2 2013-07-26
snort ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdExport Method Access Buffer Overflow 2 rev 3 2013-07-26
snort ET TROJAN Pony Loader default URI struct rev 3 2013-07-25
snort ET WEB_CLIENT JS Browser Based Ransomware rev 1 2013-07-19