Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php SELECT rev 7 2011-01-11
snort ET GAMES Blizzard Web Downloader Install Detected rev 2 2011-01-10
snort ET WEB_CLIENT Microsoft Office Visio DXF File Processing Remote Code Execution rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Tiki Wiki CMS Groupware language Parameter Local File Inclusion Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Informacion General informacion_general.php UNION SELECT SQL Injection Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Informacion General informacion_general.php SELECT FROM SQL Injection Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Informacion General informacion_general.php INSERT INTO SQL Injection Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Informacion General informacion_general.php UPDATE SET SQL Injection Attempt rev 3 2011-01-07
snort ET WEB_SPECIFIC_APPS Joomla Component com_xmovie file Parameter Local File Inclusion Attempt rev 3 2011-01-07
snort ET WEB_SERVER PHP Large Subnormal Double Precision Floating Point Number PHP DoS Inbound rev 2 2011-01-06
snort ET WEB_CLIENT DXF Extension File Detection Access Flowbit Set rev 2 2011-01-06
snort ET WEB_SERVER PHP Large Subnormal Double Precision Floating Point Number PHP DoS in URI rev 2 2011-01-06
snort ET WEB_CLIENT AVI RIFF Chunk Access Flowbit Set rev 2 2011-01-05
snort ET WEB_SERVER SELECT USER SQL Injection Attempt in URI rev 4 2011-01-05
snort ET POLICY Protocol 41 IPv6 encapsulation potential 6in4 IPv6 tunnel active rev 2 2011-01-05
snort ET WEB_CLIENT Microsoft Windows MPEG Layer-3 Audio Decoder Buffer Overflow rev 3 2011-01-05
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-7 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-3 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-4 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-8 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-1 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-5 rev 3 2010-12-30
snort ET WEB_SERVER Successful DD-WRT Information Disclosure rev 2 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-2 rev 3 2010-12-30
snort ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-6 rev 4 2010-12-30
snort ET WEB_CLIENT Hex Obfuscation of String.fromCharCode %u UTF-16 Encoding rev 3 2010-12-28
snort ET WEB_CLIENT Hex Obfuscation of arguments.callee %u UTF-16 Encoding rev 2 2010-12-28
snort ET WEB_CLIENT Hex Obfuscation of charCodeAt %u UTF-16 Encoding rev 1 2010-12-28
snort ET WEB_CLIENT Hex Obfuscation of document.write %u UTF-16 Encoding rev 1 2010-12-28
snort ET WEB_SPECIFIC_APPS MyForum centre.php padmin Parameter Local File Inclusion rev 5 2010-12-27
snort ET WEB_SPECIFIC_APPS My Datebook SQL Injection Attempt -- diary.php delete UPDATE rev 6 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv UPDATE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- ipsearch.admin.php SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details UPDATE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id UPDATE rev 8 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv UNION SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details UNION SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- ipsearch.admin.php DELETE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My PHP Dating id parameter SQL Injection rev 6 2010-12-27