Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 5 rev 2 2011-08-19
snort ET WEB_SPECIFIC_APPS Joomla jfeedback Component controller parameter Local File Inclusion Attempt rev 2 2011-08-19
snort ET POLICY TeamViewer Keep-alive inbound rev 4 2011-08-18
snort ET WEB_CLIENT Mozilla Firefox mChannel Object Dangling Pointer Use-After-Free Memory Corruption Attempt rev 1 2011-08-18
snort ET POLICY Request to Suspicious Games at pcgame.gamedia.cn rev 2 2011-08-11
snort ET TROJAN Win32/Winshow User Agent rev 1 2011-08-11
snort ET TROJAN W32/Skintrim CnC Checkin rev 1 2011-08-10
snort ET TROJAN W32/Hupigon.B User Agent TSDownload rev 1 2011-08-10
snort ET SCAN Toata Scanner User-Agent Detected rev 8 2011-08-09
snort ET TROJAN W32/FakeAlert Fake Security Tool Checkin rev 1 2011-08-09
snort ET TROJAN W32/Sality Executable Pack Digital Signature ASCII Marker rev 2 2011-08-09
snort ET WEB_SERVER PUT Website Defacement Attempt rev 1 2011-08-05
snort ET TROJAN W32/Nolja Trojan Downloader Initial Checkin rev 1 2011-08-05
snort GPL ATTACK_RESPONSE command error rev 10 2011-08-02
snort GPL ATTACK_RESPONSE id check returned root rev 8 2011-08-02
snort ET TROJAN Win32.Pamesg/ArchSMS.HL CnC Checkin rev 1 2011-08-02
snort GPL ATTACK_RESPONSE isakmp login failed rev 3 2011-08-02
snort GPL ATTACK_RESPONSE directory listing rev 8 2011-08-02
snort GPL ATTACK_RESPONSE file copied ok rev 14 2011-08-02
snort GPL ATTACK_RESPONSE del attempt rev 9 2011-08-02
snort ET MOBILE_MALWARE Android.AdSms Retrieving XML File from CnC Server rev 3 2011-07-27
snort ET WEB_CLIENT Microsoft Visio 2003 mfc71enu.dll DLL Loading Arbitrary Code Execution Attempt rev 1 2011-07-27
snort ET POLICY Peach C++ Library User Agent Outbound rev 3 2011-07-25
snort ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter INSERT INTO SQL Injection Attempt rev 2 2011-07-23
snort ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter UNION SELECT SQL Injection Attempt rev 2 2011-07-23
snort ET WEB_SPECIFIC_APPS WordPress PHP Speedy Plugin page Parameter Local File Inclusion Attempt rev 2 2011-07-23
snort ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter SELECT FROM SQL Injection Attempt rev 2 2011-07-23
snort ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter UPDATE SET SQL Injection Attempt rev 2 2011-07-23
snort ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter DELETE FROM SQL Injection Attempt rev 2 2011-07-23
snort GPL FTP SITE overflow attempt rev 11 2011-07-19
snort GPL FTP SITE CHOWN overflow attempt rev 12 2011-07-19
snort GPL WEB_SERVER apache ?M=D directory list attempt rev 10 2011-07-19
snort ET WEB_CLIENT Adobe Flash Player Button Remote Code Execution Attempt rev 1 2011-07-15
snort ET WEB_CLIENT Adobe Authplay.dll NewClass Memory Corruption Attempt rev 1 2011-07-15
snort ET MOBILE_MALWARE SslCrypt Server Communication rev 2 2011-07-15
snort ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0d0d0d0d rev 1 2011-07-14
snort ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 41414141 rev 2 2011-07-14
snort ET SHELLCODE Hex Obfuscated JavaScript NOP SLED rev 1 2011-07-14
snort ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0c0c0c0c rev 1 2011-07-14
snort ET SHELLCODE Hex Obfuscated JavaScript Heap Spray 0b0b0b0b rev 1 2011-07-14