Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- pfs.edit.inc.php SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyFusion last_seen_users_panel.php settings Parameter Local File Inclusion Attempt rev 4 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- ipsearch.admin.php SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id SELECT rev 8 2010-12-27
snort ET WEB_SPECIFIC_APPS My Datebook SQL Injection Attempt -- diary.php delete SELECT rev 6 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- pfs.edit.inc.php UNION SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- ipsearch.admin.php UNION SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id INSERT rev 8 2010-12-27
snort ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id UNION SELECT rev 8 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv UPDATE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My PHP Dating id parameter SQL Injection rev 6 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My Datebook SQL Injection Attempt -- diary.php delete INSERT rev 6 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- pfs.edit.inc.php DELETE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My Datebook SQL Injection Attempt -- diary.php delete DELETE rev 6 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- ipsearch.admin.php INSERT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyForum centre.php padmin Parameter Local File Inclusion rev 5 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- pfs.edit.inc.php INSERT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- ipsearch.admin.php UPDATE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My Datebook SQL Injection Attempt -- diary.php delete UPDATE rev 6 2010-12-27
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv DELETE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id DELETE rev 8 2010-12-27
snort ET WEB_CLIENT Oracle Java 6 Object Tag launchjnlp docbase Parameters Flowbits Set rev 2 2010-12-23
snort ET NETBIOS SMB Trans2 Query_Fs_Attribute_Info SrvSmbQueryFsInformation Pool Buffer Overflow rev 2 2010-12-23
snort ET SCADA DATAC RealWin SCADA Server Buffer Overflow rev 1 2010-12-23
snort ET NETBIOS Microsoft Windows SMB Client Race Condition Remote Code Execution rev 2 2010-12-23
snort ET P2P KuGoo P2P Connection rev 3 2010-12-22
snort ET P2P eDonkey Server Status Request rev 9 2010-12-22
snort ET P2P BitTorrent DHT nodes reply rev 4 2010-12-22
snort ET P2P ed2k request part rev 11 2010-12-22
snort ET POLICY External FTP Connection TO Local HP JetDirect Printer rev 4 2010-12-22
snort ET P2P Limewire P2P UDP Traffic rev 8 2010-12-22
snort ET P2P SoulSeek P2P Login Response rev 5 2010-12-22
snort ET P2P BitTorrent DHT find_node request rev 6 2010-12-22
snort ET P2P BitTorrent DHT get_peers request rev 5 2010-12-22
snort ET P2P ed2k file request answer rev 11 2010-12-22
snort ET P2P Gnutella TCP Traffic rev 4 2010-12-22
snort ET SCAN Sipp SIP Stress Test Detected rev 4 2010-12-22
snort ET SCAN sipscan probe rev 4 2010-12-22