Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Group-Office comment_id Parameter UPDATE SET SQL Injection Attempt rev 3 2010-11-15
snort ET WEB_SPECIFIC_APPS Group-Office comment_id Parameter UNION SELECT SQL Injection Attempt rev 3 2010-11-15
snort ET WEB_SPECIFIC_APPS Hunkaray Okul Portaly SQL Injection Attempt -- haberoku.asp id UPDATE rev 6 2010-11-15
snort ET WEB_SPECIFIC_APPS Hazir Site SQL Injection Attempt -- giris_yap.asp sifre INSERT rev 6 2010-11-15
snort ET WEB_SPECIFIC_APPS Grayscale Blog SQL Injection Attempt -- jump.php url SELECT rev 6 2010-11-15
snort ET WEB_SPECIFIC_APPS Hazir Site SQL Injection Attempt -- giris_yap.asp sifre DELETE rev 6 2010-11-15
snort ET WEB_SPECIFIC_APPS Hubscript XSS Attempt rev 4 2010-11-15
snort ET WEB_SPECIFIC_APPS Hubscript PHPInfo Attempt rev 4 2010-11-15
snort ET WEB_SPECIFIC_APPS Hunkaray Okul Portaly SQL Injection Attempt -- haberoku.asp id INSERT rev 6 2010-11-15
snort ET WEB_SPECIFIC_APPS Grayscale Blog SQL Injection Attempt -- userdetail.php id DELETE rev 6 2010-11-13
snort ET WEB_SPECIFIC_APPS Grayscale Blog SQL Injection Attempt -- userdetail.php id UPDATE rev 6 2010-11-13
snort ET WEB_SPECIFIC_APPS Grayscale Blog SQL Injection Attempt -- userdetail.php id INSERT rev 6 2010-11-12
snort ET WEB_SPECIFIC_APPS GlobalMegaCorp dvddb SQL Injection Attempt -- common.php user DELETE rev 6 2010-11-12
snort ET WEB_SPECIFIC_APPS GlobalMegaCorp dvddb SQL Injection Attempt -- common.php user INSERT rev 6 2010-11-12
snort ET WEB_SPECIFIC_APPS Grayscale Blog SQL Injection Attempt -- userdetail.php id UNION SELECT rev 6 2010-11-12
snort ET WEB_SPECIFIC_APPS GlobalMegaCorp dvddb SQL Injection Attempt -- common.php user UPDATE rev 6 2010-11-12
snort ET WEB_SPECIFIC_APPS GlobalMegaCorp dvddb SQL Injection Attempt -- common.php user UNION SELECT rev 6 2010-11-12
snort ET WEB_SPECIFIC_APPS GlobalMegaCorp dvddb SQL Injection Attempt -- common.php user SELECT rev 6 2010-11-12
snort ET WEB_SPECIFIC_APPS Grayscale Blog SQL Injection Attempt -- userdetail.php id SELECT rev 6 2010-11-12
snort ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 - Known Exploit Instance rev 6 2010-11-09
snort ET WEB_SERVER DataCha0s Web Scanner/Robot rev 38 2010-11-09
snort ET WEB_SERVER Onmouseover= in URI - Likely Cross Site Scripting Attempt rev 6 2010-11-09
snort ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt rev 6 2010-11-09
snort ET WEB_SERVER Casper Bot Search RFI Scan rev 6 2010-11-09
snort ET WEB_SERVER cmd.exe In URI - Possible Command Execution Attempt rev 6 2010-11-09
snort ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori UPDATE rev 6 2010-11-09
snort ET SCAN DotDotPwn User-Agent rev 1 2010-11-09
snort ET WEB_SERVER /system32/ in Uri - Possible Protected Directory Access Attempt rev 6 2010-11-09
snort ET SCAN DirBuster Scan in Progress rev 1 2010-11-09
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp did DELETE rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fullaspsite Asp Hosting Sitesi SQL Injection Attempt -- windows.asp kategori_id UNION SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Gazi Download Portal SQL Injection Attempt -- down_indir.asp id UNION SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS FuseTalk SQL Injection Attempt -- autherror.cfm errorcode SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fuzzylime Forum SQL Injection Attempt -- low.php topic SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fuzzylime Forum SQL Injection Attempt -- low.php topic DELETE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm categoryid UPDATE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm langId DELETE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp did UNION SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm langId SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fuzzylime Forum SQL Injection Attempt -- low.php topic INSERT rev 6 2010-11-08