Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY Inbound /uploadify.php Access rev 1 2012-09-08
snort ET POLICY Signed TLS Certificate with md5WithRSAEncryption rev 2 2012-09-08
snort ET CURRENT_EVENTS Probable Sakura exploit kit landing page with obfuscated URLs rev 1 2012-09-06
snort ET INFO WinUpack Modified PE Header Outbound rev 6 2012-09-01
snort ET INFO WinUpack Modified PE Header Inbound rev 6 2012-09-01
snort GPL CHAT Yahoo Messenger File Transfer Receive Request rev 5 2012-09-01
snort ET TROJAN Shady RAT Retrieve and Execute Command rev 2 2012-08-31
snort ET TROJAN Shady RAT Relay Command rev 2 2012-08-31
snort ET TROJAN Shady RAT Get File Command rev 2 2012-08-31
snort ET TROJAN Shady RAT Put File Command rev 2 2012-08-31
snort ET TROJAN Shady RAT Send Status Result rev 2 2012-08-31
snort ET TROJAN Mac Flashback Checkin 2 rev 7 2012-08-31
snort ET TROJAN Trojan.JS.QLP Checkin rev 2 2012-08-30
snort ET CURRENT_EVENTS Likely TDS redirecting to exploit kit rev 3 2012-08-29
snort ET TROJAN Tibs/Harnig Downloader Activity rev 6 2012-08-24
snort GPL RPC rlogin login failure rev 8 2012-08-21
snort GPL SHELLCODE sparc setuid 0 rev 8 2012-08-21
snort GPL SHELLCODE sparc NOOP rev 7 2012-08-21
snort GPL RPC rlogin login failure rev 7 2012-08-21
snort GPL SHELLCODE Digital UNIX NOOP rev 8 2012-08-21
snort GPL SHELLCODE Linux shellcode rev 11 2012-08-21
snort GPL SHELLCODE sparc NOOP rev 7 2012-08-21
snort GPL RPC portmap listing TCP 111 rev 13 2012-08-21
snort GPL RPC portmap espd request TCP rev 17 2012-08-21
snort GPL POP3 x86 SCO overflow rev 11 2012-08-21
snort GPL RPC snmpXdmi overflow attempt TCP rev 15 2012-08-21
snort GPL RPC rlogin LinuxNIS rev 7 2012-08-21
snort GPL SHELLCODE sparc NOOP rev 7 2012-08-21
snort GPL POP3 x86 Linux overflow rev 8 2012-08-21
snort GPL SHELLCODE HP-UX NOOP rev 9 2012-08-21
snort GPL RPC portmap snmpXdmi request TCP rev 19 2012-08-21
snort GPL RPC portmap ypupdated request TCP rev 11 2012-08-21
snort GPL TELNET TELNET login failed rev 11 2012-08-21
snort GPL SHELLCODE HP-UX NOOP rev 8 2012-08-21
snort GPL SHELLCODE SGI NOOP rev 7 2012-08-21
snort GPL RPC portmap sadmind request UDP rev 8 2012-08-21
snort GPL RPC portmap ypserv request UDP rev 13 2012-08-21
snort GPL RPC portmap yppasswd request UDP rev 9 2012-08-21
snort ET WEB_SPECIFIC_APPS MindTouch Deki Wiki wgDekiPluginPath parameter Local File Inclusion Attempt rev 2 2012-08-20
snort ET WEB_SPECIFIC_APPS MindTouch Deki Wiki link.php Local File Inclusion Attempt rev 2 2012-08-20