Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL RPC tooltalk TCP overflow attempt rev 9 2011-04-22
snort ET WEB_SPECIFIC_APPS LightNEasy File Manager language Parameter Local File Inclusion Attempt rev 2 2011-04-22
snort GPL RPC portmap NFS request TCP rev 8 2011-04-22
snort GPL POP3 AUTH overflow attempt rev 9 2011-04-22
snort GPL RPC portmap SET attempt UDP 111 rev 6 2011-04-22
snort GPL RPC portmap NFS request UDP rev 8 2011-04-22
snort GPL RPC portmap RQUOTA request UDP rev 8 2011-04-22
snort GPL RPC portmap proxy attempt TCP rev 7 2011-04-22
snort GPL FTP ALLO overflow attempt rev 2 2011-04-22
snort GPL FTP .forward rev 6 2011-04-22
snort GPL FTP CMD overflow attempt rev 11 2011-04-22
snort GPL FTP shadow retrieval attempt rev 6 2011-04-22
snort GPL RPC portmap SET attempt TCP 111 rev 6 2011-04-22
snort ET POLICY MS Terminal Server Root login rev 1 2011-04-22
snort GPL FTP SITE ZIPCHK overflow attempt rev 6 2011-04-22
snort GPL POP3 XTND overflow attempt rev 5 2011-04-22
snort GPL RPC tooltalk UDP overflow attempt rev 9 2011-04-22
snort GPL POP3 LIST overflow attempt rev 8 2011-04-22
snort GPL RPC portmap proxy attempt UDP rev 7 2011-04-22
snort GPL FTP SITE NEWER overflow attempt rev 7 2011-04-22
snort GPL RPC RQUOTA getquota overflow attempt UDP rev 10 2011-04-22
snort ET POLICY MS Remote Desktop POS User Login Request rev 1 2011-04-22
snort GPL FTP RMDIR overflow attempt rev 7 2011-04-22
snort GPL CHAT MSN login attempt rev 3 2011-04-21
snort GPL WORM Slammer Worm propagation attempt OUTBOUND rev 8 2011-04-21
snort GPL WEB_SERVER perl post attempt rev 7 2011-04-21
snort GPL RPC yppasswd username overflow attempt UDP rev 10 2011-04-21
snort GPL FTP REST overflow attempt rev 7 2011-04-21
snort GPL FTP RMD overflow attempt rev 10 2011-04-21
snort GPL MISC CVS missing cvsroot response rev 3 2011-04-21
snort GPL MISC CVS double free exploit attempt response rev 5 2011-04-21
snort GPL RPC portmap status request TCP rev 7 2011-04-21
snort ET WEB_SPECIFIC_APPS Joomla virtuemart Blind SQL Injection Attempt rev 3 2011-04-21
snort ET WEB_SPECIFIC_APPS eGroupware loaddetails.php script UNION SELECT SQL Injection Attempt rev 2 2011-04-21
snort GPL RPC portmap espd request UDP rev 13 2011-04-21
snort GPL FTP PASS overflow attempt rev 17 2011-04-21
snort GPL RPC portmap kcms_server request TCP rev 11 2011-04-21
snort GPL FTP DELE overflow attempt rev 9 2011-04-21
snort GPL CHAT MSN user search rev 2 2011-04-21
snort GPL MISC CVS invalid user authentication response rev 5 2011-04-21