Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Joomla Frontend-User-Access controller Parameter Local File Inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS WeBid active_auctions.php lan Parameter Local File inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Services id Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Woltlab Burning Board katid Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Dokeos and Chamilo open_document.php file Parameter File Disclosure Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PMB Services id Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PMB Services id Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PMB Services id Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Horde type Parameter Local File Inclusion Attempt rev 2 2011-02-25
snort ET NETBIOS Microsoft Windows Server 2003 Active Directory Pre-Auth BROWSER ELECTION Heap Overflow Attempt rev 2 2011-02-21
snort ET TROJAN Fake Opera 8.11 UA related to Trojan Activity rev 1 2011-02-18
snort ET WEB_SERVER DD-WRT Information Disclosure Attempt rev 3 2011-02-17
snort ET TROJAN Rootkit TDSS/Alureon Checkin 2 rev 1 2011-02-14
snort ET TROJAN Downloader.Win32.Small CnC Beacon rev 7 2011-02-08
snort ET VOIP Modified Sipvicious Asterisk PBX User-Agent rev 1 2011-02-07
snort ET VOIP Possible Inbound VOIP Scan/Misuse With User-Agent Zoiper rev 1 2011-02-07
snort ET WEB_CLIENT Hex Obfuscation of unescape %u UTF-16 Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of parseInt % Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of eval %u UTF-16 Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of substr %u UTF-8 Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of parseInt %u UTF-16 Encoding rev 1 2011-02-03
snort ET SHELLCODE Common %u0a%u0a%u0a%u0a UTF-8 Heap Spray String rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of parseInt %u UTF-8 Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of substr % Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of unescape % Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of Script Tag %u UTF-16 Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of Script Tag %u UTF-8 Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of eval % Encoding rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of eval %u UTF-8 Encoding rev 1 2011-02-03
snort ET SHELLCODE Common %u0a0a%u0a0a UTF-16 Heap Spray String rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of Script Tag % Encoding rev 1 2011-02-03
snort ET SHELLCODE Common %u0c%u0c%u0c%u0c UTF-8 Heap Spray String rev 1 2011-02-03
snort ET WEB_CLIENT Hex Obfuscation of substr %u UTF-16 Encoding rev 1 2011-02-03