Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL NETBIOS SMB IActivation unicode bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB InitiateSystemShutdown unicode attempt rev 6 2011-09-20
snort GPL NETBIOS SMB CoGetInstanceFromFile unicode little endian overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS llsrpc unicode bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB NT Trans NT CREATE unicode oversized Security Descriptor attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS llsrpc bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB NT Trans NT CREATE oversized Security Descriptor attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS D$ share access rev 9 2011-09-20
snort GPL NETBIOS SMB-DS RemoteActivation little endian attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS OpenKey unicode overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS msqueue unicode bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB OpenKey unicode overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB irot little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS IrotIsRunning attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS irot unicode little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB winreg unicode create tree attempt rev 10 2011-09-20
snort GPL NETBIOS SMB-DS IActivation unicode little endian bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB nddeapi unicode bind attempt rev 6 2011-09-20
snort GPL NETBIOS SMB msqueue bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS IrotIsRunning unicode attempt rev 6 2011-09-20
snort GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS ISystemActivator unicode bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS IActivation bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS ADMIN$ share access rev 9 2011-09-20
snort GPL NETBIOS SMB-DS llsrconnect little endian overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB InitiateSystemShutdown unicode little endian attempt rev 6 2011-09-20
snort GPL NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian overflow attempt rev 7 2011-09-20
snort GPL NETBIOS SMB RemoteActivation unicode attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS msqueue bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB CoGetInstanceFromFile unicode attempt rev 4 2011-09-20
snort GPL NETBIOS SMB OpenKey overflow attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS OpenKey little endian overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS InitiateSystemShutdown attempt rev 10 2011-09-20
snort GPL NETBIOS SMB-DS irot unicode bind attempt rev 4 2011-09-20
snort GPL NETBIOS SMB IrotIsRunning unicode little endian attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS RemoteActivation unicode attempt rev 4 2011-09-20
snort GPL NETBIOS SMB NDdeSetTrustedShareW unicode overflow attempt rev 6 2011-09-20
snort ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter SELECT FROM SQL Injection Attempt rev 2 2011-09-19
snort ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter UNION SELECT SQL Injection Attempt rev 2 2011-09-19
snort ET WEB_SPECIFIC_APPS WordPress Tune Library Plugin letter parameter UPDATE SET SQL Injection Attempt rev 2 2011-09-19