Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS nvisionix Roaming System sessions.php script Local File Inclusion Attempt rev 1 2011-06-07
snort ET WEB_SPECIFIC_APPS Opencadastre soustab.php script Local File Inclusion Vulnerability rev 1 2011-06-07
snort ET SCAN ZmEu Scanner User-Agent Inbound rev 1 2011-06-07
snort ET WEB_SPECIFIC_APPS Joomla Component com_jmsfileseller view Parameter Local File Inclusion Attempt rev 1 2011-06-07
snort ET POLICY Smilebox Software/Adware Checkin rev 2 2011-06-06
snort ET ACTIVEX Cisco AnyConnect VPN Secure Mobility Client Cisco.AnyConnect.VPNWeb.1 Arbitrary Program Execution Attempt rev 2 2011-06-03
snort GPL ICMP_INFO PING Seer Windows rev 8 2011-06-02
snort GPL ICMP_INFO PING Ping-O-MeterWindows rev 8 2011-06-02
snort GPL SHELLCODE AIX NOOP rev 8 2011-06-02
snort GPL ICMP_INFO PING BayRS Router rev 7 2011-06-02
snort GPL ICMP_INFO PING Cisco Type.x rev 8 2011-06-02
snort ET MOBILE_MALWARE Android/Smspacem CnC Communication Attempt rev 2 2011-06-02
snort GPL ICMP_INFO PING *NIX rev 8 2011-06-02
snort GPL SCAN PING CyberKit 2.2 Windows rev 6 2011-06-02
snort GPL SCAN ISS Pinger rev 4 2011-06-02
snort GPL ICMP_INFO PING BSDtype rev 7 2011-06-02
snort GPL ICMP_INFO PING BeOS4.x rev 8 2011-06-02
snort GPL SCAN PING Sniffer Pro/NetXRay network scan rev 5 2011-06-02
snort ET SHELLCODE Javascript Split String Unicode Heap Spray Attempt rev 1 2011-06-02
snort GPL ICMP_INFO PING IP NetMonitor Macintosh rev 8 2011-06-02
snort GPL FTP APPE overflow attempt rev 10 2011-06-02
snort GPL ICMP_INFO PING Microsoft Windows rev 8 2011-06-02
snort GPL SCAN superscan echo rev 5 2011-06-02
snort GPL SCAN PING Delphi-Piette Windows rev 8 2011-06-02
snort GPL ICMP_INFO PING Flowpoint2200 or Network Management Software rev 7 2011-06-02
snort GPL ICMP_INFO PING Pinger Windows rev 8 2011-06-02
snort ET TROJAN Bifrose Response from Controller rev 4 2011-06-02
snort GPL ICMP_INFO PING speedera rev 6 2011-06-02
snort GPL ICMP_INFO PING WhatsupGold Windows rev 6 2011-06-02
snort GPL SCAN webtrends scanner rev 5 2011-06-02
snort GPL ICMP_INFO PING Network Toolbox 3 Windows rev 8 2011-06-02
snort ET TROJAN Known Skunkx DDOS Bot User-Agent Cyberdog rev 1 2011-05-31
snort ET ACTIVEX Magneto ICMP ActiveX ICMPSendEchoRequest Remote Code Execution Attempt rev 1 2011-05-31
snort ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script DELETE FROM SQL Injection Attempt rev 1 2011-05-27
snort ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script SELECT FROM SQL Injection Attempt rev 1 2011-05-27
snort ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script INSERT INTO SQL Injection Attempt rev 1 2011-05-27
snort ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script UNION SELECT SQL Injection Attempt rev 1 2011-05-27
snort ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script UPDATE SET SQL Injection Attempt rev 1 2011-05-27
snort GPL SQL MYSQL root login attempt rev 4 2011-05-25
snort GPL SQL MYSQL show databases attempt rev 4 2011-05-25