Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET SCAN Apache mod_proxy Reverse Proxy Exposure 2 rev 3 2011-10-24
snort ET SCAN Apache mod_proxy Reverse Proxy Exposure 1 rev 2 2011-10-24
snort GPL EXPLOIT Alternate Data streams ASP file access attempt rev 14 2011-10-24
snort ET TROJAN IRC DNS request on non-standard port rev 10 2011-10-21
snort ET CHAT IRC PRIVMSG command rev 20 2011-10-21
snort GPL CHAT IRC DCC file transfer request rev 11 2011-10-21
snort ET CHAT IRC USER command rev 15 2011-10-21
snort ET CHAT IRC NICK command rev 18 2011-10-21
snort ET TROJAN IRC DCC chat request on non-standard port rev 11 2011-10-21
snort ET CHAT IRC JOIN command rev 18 2011-10-21
snort ET CHAT IRC PING command rev 15 2011-10-21
snort GPL CHAT IRC DCC chat request rev 10 2011-10-21
snort ET SCAN Paros Proxy Scanner Detected rev 10 2011-10-19
snort ET TROJAN Suspicious HTTP Request for gift.exe rev 1 2011-10-19
snort ET SCAN NMAP SQL Spider Scan rev 1 2011-10-19
snort ET TROJAN Win32.Cerberus RAT Server ping rev 2 2011-10-14
snort ET TROJAN Win32.Cerberus RAT Client pong rev 2 2011-10-14
snort ET SMTP Abuseat.org Block Message rev 3 2011-10-12
snort ET WEB_SPECIFIC_APPS Mambo AHS Shop component INSERT INTO SQL Injection Attempt rev 4 2011-10-12
snort ET WEB_SPECIFIC_APPS Mambo AHS Shop component DELETE FROM SQL Injection Attempt rev 4 2011-10-12
snort ET POLICY VMware User-Agent Outbound rev 4 2011-10-12
snort ET WEB_SPECIFIC_APPS Mambo AHS Shop component UPDATE SET SQL Injection Attempt rev 4 2011-10-12
snort ET WEB_CLIENT Adobe Shockwave Director tSAC Chunk memory corruption Attempt rev 5 2011-10-12
snort ET WEB_SPECIFIC_APPS Joomla Redirect Component view Parameter Local File Inclusion Attempt rev 5 2011-10-12
snort ET WEB_SPECIFIC_APPS Mambo AHS Shop component SELECT FROM SQL Injection Attempt rev 4 2011-10-12
snort ET TROJAN Backdoor.Win32.Aldibot.A Checkin rev 3 2011-10-11
snort ET SCADA Sunway ForceControl Activex Control Vulnerability rev 3 2011-10-05
snort ET TROJAN Trojan-Dropper.Win32.StartPage.dvm or Mebromi Bios Rootkit CnC Count Checkin rev 4 2011-10-05
snort ET WEB_SPECIFIC_APPS Joomla RokQuickCart view Parameter Local File Inclusion Attempt rev 3 2011-10-05
snort ET TROJAN Win32/OnLineGames GetMyIP Style Checkin rev 1 2011-10-01
snort ET TROJAN Trojan Downloader User-Agent BGroom rev 1 2011-10-01
snort GPL POLICY PCAnywhere Failed Login rev 5 2011-09-29
snort GPL MISC Invalid PCAnywhere Login rev 6 2011-09-29
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir DELETE FROM SQL Injection Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir UNION SELECT SQL Injection Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir UPDATE SET SQL Injection Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir INSERT INTO SQL Injection Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS TinyWebGallery workaround_dir parameter Local File Inclusion Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS TinyWebGallery install_path parameter Local File Inclusion Attempt rev 2 2011-09-28
snort ET WEB_SPECIFIC_APPS Mambo N-Myndir SELECT FROM SQL Injection Attempt rev 2 2011-09-28