Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Downloader.VB.TX/Backdoor.Win32.DSSdoor!IK Checkin rev 8 2012-05-23
snort ET CURRENT_EVENTS Fragus Exploit jar Download rev 2 2012-05-23
snort ET TROJAN Win32/Sisron/BackDoor.Cybergate.1 Checkin rev 8 2012-05-23
snort ET TROJAN Hoax.Win32.BadJoke/DownLoader1.57593 Checkin rev 3 2012-05-23
snort ET POLICY OpenVPN Update Check rev 1 2012-05-22
snort ET TROJAN Win32/MultiPasswordRecovery.A cs-crash PWS rev 3 2012-05-19
snort ET WEB_SPECIFIC_APPS Joomla Appointment Booking Pro view parameter Local File Inclusion Attempt rev 3 2012-05-18
snort ET WEB_SPECIFIC_APPS Joomla com_media file parameter Local File Inclusion Attempt rev 3 2012-05-18
snort ET POLICY Internal Host Getting External IP Address - ip2city.asp rev 1 2012-05-17
snort ET TROJAN Win32/Comrerop Checkin to FTP server rev 2 2012-05-17
snort ET TROJAN W32/SpyBanker Infection Confirmation Email 2 rev 1 2012-05-17
snort ET TROJAN W32/Downvision.A Initial Checkin rev 4 2012-05-16
snort ET SCAN Core-Project Scanning Bot UA Detected rev 6 2012-05-16
snort ET SCAN Cisco Torch IOS HTTP Scan rev 9 2012-05-16
snort ET TROJAN Medfos/Midhos Checkin rev 2 2012-05-10
snort ET WEB_SPECIFIC_APPS Joomla com_obsuggest controller parameter Local File Inclusion Attempt rev 2 2012-05-04
snort ET WEB_SPECIFIC_APPS Joomla com_joomtouch controller parameter Local File Inclusion Attempt rev 2 2012-05-04
snort ET WEB_SPECIFIC_APPS WordPress WP Custom Pages url parameter Local File Inclusion Attempt rev 2 2012-05-04
snort ET SCAN Vega Web Application Scan rev 2 2012-05-02
snort ET CURRENT_EVENTS DRIVEBY Generic - Redirection to Kit - BrowserDetect with var stopit rev 2 2012-05-02
snort ET TROJAN P2P Zeus or ZeroAccess Request To CnC rev 9 2012-05-02
snort ET TROJAN Win32/Ponmocup.A Checkin rev 3 2012-05-01
snort ET CURRENT_EVENTS Unkown exploit kit pdf download rev 2 2012-04-30
snort ET EXPLOIT PWDump4 Password dumping exe copied to victim rev 3 2012-04-30
snort ET WEB_SPECIFIC_APPS Mambo Zorder zorder Parameter INSERT INTO SQL Injection Vulnerability rev 3 2012-04-30
snort ET EXPLOIT Pwdump6 Session Established test file created on victim rev 4 2012-04-30
snort ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter UPDATE SET SQL Injection Attempt rev 3 2012-04-30
snort ET ACTIVEX Tracker Software pdfSaver ActiveX InitFromRegistry Method Access Potential Buffer Overflow rev 3 2012-04-28
snort ET WEB_SPECIFIC_APPS Joomla com_some controller Parameter Local File Inclusion Attempt rev 3 2012-04-28
snort ET ACTIVEX Quest Explain Plan Display ActiveX Control SaveToFile Insecure Method Access 2 rev 2 2012-04-28
snort ET ACTIVEX Tracker Software pdfSaver ActiveX StoreInRegistry Method Access Potential Buffer Overflow 2 rev 4 2012-04-28
snort ET ACTIVEX Tracker Software pdfSaver ActiveX StoreInRegistry Method Access Potential Buffer Overflow rev 4 2012-04-28
snort ET ACTIVEX Quest Explain Plan Display ActiveX Control SaveToFile Insecure Method Access rev 2 2012-04-28
snort ET TROJAN Backdoor Win32.Idicaf/Atraps rev 7 2012-04-26
snort ET TROJAN ConstructorWin32/Agent.V rev 6 2012-04-26
snort ET CURRENT_EVENTS Incognito Exploit Kit PDF request to images.php?t=81118 rev 3 2012-04-26
snort ET CURRENT_EVENTS TDS Sutra - redirect received rev 4 2012-04-25
snort ET CURRENT_EVENTS TDS Sutra - cookie set rev 2 2012-04-25
snort ET POLICY Dlink Soho Router Config Page Access Attempt rev 7 2012-04-24
snort ET WEB_SPECIFIC_APPS Possible HP Power Manager Management Web Server Login Remote Buffer Overflow Attempt rev 6 2012-04-24