Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL MISC ident version request rev 5 2012-07-30
snort GPL FTP RNTO overflow attempt rev 8 2012-07-30
snort GPL MISC rlogin root rev 6 2012-07-30
snort GPL EXPLOIT .cmd executable file parsing attack rev 6 2012-07-30
snort GPL FTP STAT overflow attempt rev 13 2012-07-30
snort GPL MISC rlogin bin rev 6 2012-07-30
snort GPL FTP XMKD overflow attempt rev 5 2012-07-30
snort GPL POLICY PCAnywhere Attempted Administrator Login rev 5 2012-07-30
snort GPL FTP NLST overflow attempt rev 7 2012-07-30
snort GPL P2P GNUTella client request rev 7 2012-07-30
snort GPL FTP invalid MDTM command attempt rev 7 2012-07-30
snort GPL FTP CWD ~root attempt rev 11 2012-07-30
snort GPL SNMP public access tcp rev 14 2012-07-30
snort GPL MISC rsh froot rev 6 2012-07-30
snort GPL MISC rwhoisd format string attempt rev 7 2012-07-30
snort GPL MISC UPnP Location overflow rev 14 2012-07-30
snort GPL FTP CWD ... rev 8 2012-07-30
snort GPL FTP RETR overflow attempt rev 8 2012-07-30
snort GPL MISC rlogin echo++ rev 6 2012-07-30
snort GPL SMTP expn decode rev 10 2012-07-27
snort GPL EXPLOIT ISAPI .idq attempt rev 16 2012-07-27
snort GPL EXPLOIT login buffer non-evasive overflow attempt rev 4 2012-07-27
snort ET WEB_SPECIFIC_APPS Joomla PollXT component Itemid parameter Local File Inclusion Attempt rev 1 2012-07-27
snort GPL EXPLOIT /iisadmpwd/aexp2.htr access rev 12 2012-07-27
snort GPL SNMP PROTOS test-suite-trap-app attempt rev 6 2012-07-27
snort GPL EXPLOIT xp_sprintf possible buffer overflow rev 10 2012-07-27
snort GPL SMTP RCPT TO overflow rev 15 2012-07-27
snort GPL EXPLOIT CodeRed v2 root.exe access rev 10 2012-07-27
snort GPL EXPLOIT xp_filelist attempt rev 7 2012-07-27
snort ET WEB_SPECIFIC_APPS Joomla com_picasa2gallery controller parameter Local File Inclusion vulnerability rev 1 2012-07-27
snort GPL SMTP vrfy decode rev 10 2012-07-27
snort GPL EXPLOIT sp_start_job - program execution rev 7 2012-07-27
snort ET ACTIVEX Possible Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute rev 2 2012-07-27
snort GPL EXPLOIT iisadmpwd attempt rev 12 2012-07-27
snort GPL EXPLOIT administrators.pwd access rev 9 2012-07-27
snort GPL SMTP expn root rev 13 2012-07-27
snort GPL EXPLOIT fpcount access rev 11 2012-07-27
snort GPL EXPLOIT rsh bin rev 6 2012-07-27
snort GPL EXPLOIT .htr access rev 16 2012-07-27
snort GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt rev 11 2012-07-27