Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN UPDATE Protocol Trojan Communication detected on http ports 2 rev 4 2012-09-19
snort ET TROJAN Mirage Campaign checkin rev 1 2012-09-19
snort ET INFO JAVA - document.createElement applet rev 1 2012-09-18
snort ET WEB_SERVER Brutus Scan Inbound rev 1 2012-09-17
snort ET SCAN Brutus Scan Outbound rev 1 2012-09-17
snort GPL NETBIOS SMB-DS repeated logon failure rev 4 2012-09-14
snort GPL NETBIOS SMB repeated logon failure rev 4 2012-09-14
snort GPL RPC portmap rexd request UDP rev 9 2012-09-14
snort GPL SQL xp_cmdshell program execution rev 7 2012-09-14
snort GPL RPC portmap snmpXdmi request UDP rev 15 2012-09-14
snort GPL RPC portmap amountd request UDP rev 9 2012-09-14
snort GPL SQL sp_start_job - program execution rev 6 2012-09-14
snort GPL TFTP GET Admin.dll rev 5 2012-09-14
snort GPL RPC portmap mountd request UDP rev 9 2012-09-14
snort GPL RPC portmap bootparam request UDP rev 14 2012-09-14
snort GPL RPC portmap cmsd request UDP rev 9 2012-09-14
snort GPL RPC portmap listing UDP 111 rev 10 2012-09-14
snort GPL RPC portmap ttdbserv request UDP rev 18 2012-09-14
snort GPL RPC portmap pcnfsd request UDP rev 10 2012-09-14
snort GPL RPC portmap nisd request UDP rev 10 2012-09-14
snort GPL RPC portmap rstatd request UDP rev 10 2012-09-14
snort GPL RPC portmap rusers request UDP rev 12 2012-09-14
snort GPL RPC portmap selection_svc request UDP rev 9 2012-09-14
snort GPL RPC portmap admind request UDP rev 9 2012-09-14
snort GPL TFTP GET nc.exe rev 5 2012-09-14
snort GPL RPC portmap status request UDP rev 9 2012-09-14
snort GPL IMAP Overflow Attempt rev 8 2012-09-13
snort GPL SQL service_name buffer overflow attempt rev 3 2012-09-13
snort GPL NETBIOS SMB-DS Session Setup AndX request username overflow attempt rev 6 2012-09-12
snort GPL WEB_SERVER service.pwd rev 8 2012-09-12
snort GPL IMAP copy literal overflow attempt rev 3 2012-09-12
snort GPL WEB_SERVER service.cnf access rev 11 2012-09-12
snort GPL SQL Oracle iSQLPlus login.uix username overflow attempt rev 4 2012-09-12
snort GPL IMAP subscribe overflow attempt rev 2 2012-09-12
snort GPL TFTP GET passwd rev 5 2012-09-12
snort GPL IMAP examine overflow attempt rev 2 2012-09-12
snort GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt rev 11 2012-09-12
snort GPL NETBIOS xp_reg* registry access rev 12 2012-09-12
snort GPL WEB_SERVER viewcode access rev 11 2012-09-12
snort GPL TELNET Telnet Root not on console rev 9 2012-09-12