Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL SQL sa login failed rev 10 2012-09-12
snort GPL SQL shellcode attempt rev 7 2012-09-12
snort GPL IMAP status overflow attempt rev 3 2012-09-12
snort GPL WEB_SERVER author.exe access rev 8 2012-09-12
snort GPL WEB_SERVER python access attempt rev 9 2012-09-12
snort GPL IMAP unsubscribe literal overflow attempt rev 3 2012-09-12
snort GPL TELNET root login rev 9 2012-09-12
snort GPL IMAP examine overflow attempt rev 2 2012-09-12
snort GPL TELNET Telnet Root not on console rev 9 2012-09-12
snort GPL NETBIOS SMB-DS DCEPRC ORPCThis request flood attempt rev 9 2012-09-12
snort GPL SQL sp_adduser - database user creation rev 6 2012-09-12
snort ET CURRENT_EVENTS DRIVEBY Generic - 8Char.JAR Naming Algorithm rev 3 2012-09-12
snort GPL IMAP subscribe literal overflow attempt rev 3 2012-09-12
snort GPL SQL shellcode attempt rev 7 2012-09-12
snort GPL SQL sp_delete_alert log file deletion rev 6 2012-09-12
snort GPL IMAP append overflow attempt rev 3 2012-09-12
snort GPL IMAP subscribe overflow attempt rev 2 2012-09-12
snort GPL IMAP copy literal overflow attempt rev 3 2012-09-12
snort GPL WEB_SERVER service.pwd rev 8 2012-09-12
snort GPL SQL Oracle iSQLPlus login.uix username overflow attempt rev 4 2012-09-12
snort GPL SQL sp_password - password change rev 6 2012-09-12
snort GPL NETBIOS SMB-DS DCERPC ISystemActivator unicode bind attempt rev 8 2012-09-12
snort GPL WEB_SERVER /scripts/iisadmin/default.htm access rev 9 2012-09-12
snort GPL SQL sp_password password change rev 7 2012-09-12
snort GPL IMAP delete overflow attempt rev 2 2012-09-12
snort GPL EXPLOIT site/iisamples access rev 10 2012-09-12
snort GPL SHELLCODE MSSQL shellcode attempt rev 8 2012-09-12
snort GPL WEB_SERVER .htpasswd access rev 7 2012-09-12
snort GPL NETBIOS xp_reg* registry access rev 12 2012-09-12
snort GPL WEB_SERVER iisadmin access rev 12 2012-09-12
snort GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt rev 11 2012-09-12
snort GPL WEB_SERVER viewcode access rev 11 2012-09-12
snort GPL WEB_SERVER global.asa access rev 14 2012-09-12
snort GPL WEB_SERVER authors.pwd access rev 12 2012-09-12
snort GPL WEB_SERVER writeto.cnf access rev 11 2012-09-12
snort GPL TFTP GET shadow rev 5 2012-09-12
snort GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt rev 12 2012-09-12
snort GPL SHELLCODE x86 0xEB0C NOOP rev 8 2012-09-12
snort ET CURRENT_EVENTS NeoSploit - Version Enumerated - Java rev 1 2012-09-11
snort ET TROJAN Tatanga/Win32.Kexject.A Checkin rev 4 2012-09-10