Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Expinion.net iNews SQL Injection Attempt -- articles.asp ex UPDATE rev 7 2010-11-04
snort ET EXPLOIT Pwdump3e Session Established Reg-Entry port 445 rev 9 2010-11-04
snort ET EXPLOIT Pwdump3e Password Hash Retrieval port 445 rev 12 2010-11-04
snort ET SCAN Watchfire AppScan Web App Vulnerability Scanner rev 6 2010-11-04
snort ET EXPLOIT NTDump.exe Service Started port 445 rev 8 2010-11-04
snort ET EXPLOIT SQL sp_configure - configuration change rev 3 2010-11-04
snort ET SCAN WebShag Web Application Scan Detected rev 5 2010-11-04
snort ET WEB_SPECIFIC_APPS EzHRS HR Assist SQL Injection Attempt -- vdateUsr.asp UNION SELECT rev 6 2010-11-04
snort ET WEB_SPECIFIC_APPS F5 Data Manager DiagLogListActionBody.do Local File Inclusion Attempt rev 3 2010-11-04
snort ET SCAN Default Mysqloit User Agent Detected - Mysql Injection Takover Tool rev 5 2010-11-04
snort ET ATTACK_RESPONSE FTP inaccessible directory access COM2 rev 9 2010-11-04
snort ET ATTACK_RESPONSE FTP inaccessible directory access LPT3 rev 9 2010-11-04
snort ET EXPLOIT NTDump Session Established Reg-Entry port 139 rev 9 2010-11-04
snort ET ATTACK_RESPONSE FTP inaccessible directory access COM3 rev 9 2010-11-04
snort ET ATTACK_RESPONSE r57 phpshell footer detected rev 8 2010-11-04
snort ET ATTACK_RESPONSE FTP inaccessible directory access COM1 rev 9 2010-11-04
snort ET WEB_SPECIFIC_APPS EzHRS HR Assist SQL Injection Attempt -- vdateUsr.asp INSERT rev 6 2010-11-04
snort ET SCAN Grabber.py Web Scan Detected rev 5 2010-11-04
snort ET SCAN DirBuster Web App Scan in Progress rev 5 2010-11-04
snort ET ATTACK_RESPONSE FTP inaccessible directory access NULL rev 9 2010-11-04
snort ET WEB_SPECIFIC_APPS F5 Data Manager ViewInventoryErrorReport.do Local File Inclusion Attempt rev 3 2010-11-04
snort ET WEB_SPECIFIC_APPS Ezboxx Portal System Beta SQL Injection Attempt -- ShowAppendix.asp iid UNION SELECT rev 6 2010-11-04
snort ET WEB_SPECIFIC_APPS Expinion.net iNews SQL Injection Attempt -- articles.asp ex INSERT rev 7 2010-11-04
snort ET SCAN Amap UDP Service Scan Detected rev 5 2010-11-04
snort ET WEB_SPECIFIC_APPS EzHRS HR Assist SQL Injection Attempt -- vdateUsr.asp DELETE rev 6 2010-11-04
snort ET EXPLOIT Pwdump4 Session Established GetHash port 445 rev 5 2010-11-04
snort ET SCAN Tomcat admin-blank login credentials rev 8 2010-11-04
snort ET ATTACK_RESPONSE FTP inaccessible directory access LPT4 rev 9 2010-11-04
snort ET EXPLOIT Pwdump4 Session Established GetHash port 139 rev 5 2010-11-04
snort ET SCAN bsqlbf Brute Force SQL Injection rev 6 2010-11-04
snort ET WEB_SPECIFIC_APPS ExoPHPDesk SQL Injection Attempt -- faq.php id DELETE rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS e-Vision CMS SQL Injection Attempt -- style.php template DELETE rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS ExBB threadstop.php exbb Parameter Local File Inclusion rev 4 2010-11-03
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- result.asp amaxprice INSERT rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- result.asp amaxprice UPDATE rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS Enthusiast SQL Injection Attempt -- show_joined.php cat DELETE rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS Enthusiast SQL Injection Attempt -- show_joined.php cat UNION SELECT rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS Experts answer.php question_id parameter SQL Injection rev 4 2010-11-03
snort ET WEB_SPECIFIC_APPS Eric GUILLAUME uploader&downloader SQL Injection Attempt -- administre2.php id_user INSERT rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS Enthusiast SQL Injection Attempt -- show_owned.php cat UNION SELECT rev 6 2010-11-03