Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp adID UPDATE rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS Evolve shopping cart SQL Injection Attempt -- products.asp partno UNION SELECT rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS E-SMARTCART SQL Injection Attempt -- productdetail.asp product_id DELETE rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS Enthusiast SQL Injection Attempt -- show_owned.php cat INSERT rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS ExoPHPDesk SQL Injection Attempt -- faq.php id INSERT rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS ExoPHPDesk SQL Injection Attempt -- faq.php id DELETE rev 6 2010-11-03
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp clear UPDATE rev 6 2010-11-02
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp clear UNION SELECT rev 6 2010-11-01
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp clear INSERT rev 6 2010-11-01
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp clear DELETE rev 6 2010-11-01
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp clear SELECT rev 5 2010-11-01
snort ET SCAN Medusa User-Agent rev 1 2010-10-31
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- result.asp cat SELECT rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- result.asp cat UNION SELECT rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- homeDetail.asp AD_ID INSERT rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp compare SELECT rev 6 2010-10-30
snort ET TROJAN Optix Pro Trojan/Keylogger Reporting Installation via HTTP-Email Post rev 5 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp compare INSERT rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp compare UNION SELECT rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp compare UPDATE rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- homeDetail.asp AD_ID UPDATE rev 6 2010-10-30
snort ET TROJAN PRG/wnspoem/Zeus InfoStealer Trojan Config Download rev 9 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- homeDetail.asp AD_ID DELETE rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- result.asp cat UPDATE rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- result.asp cat INSERT rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- compareHomes.asp compare DELETE rev 6 2010-10-30
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- result.asp cat DELETE rev 6 2010-10-30
snort ET ACTIVEX Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Attempt rev 1 2010-10-29
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- types.asp TYPE_ID SELECT rev 5 2010-10-29
snort ET TROJAN Rogue.Win32/Winwebsec Checkin rev 5 2010-10-29
snort ET TROJAN Likely FakeAV/Fakeinit/FraudLoad Checkin rev 6 2010-10-29
snort ET WEB_SPECIFIC_APPS iGaming CMS loadplugin.php load Parameter Local File inclusion Attempt rev 2 2010-10-29
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- types.asp TYPE_ID INSERT rev 5 2010-10-29
snort ET ACTIVEX Softek Barcode Reader Toolkit ActiveX Control Buffer Overflow Attempt rev 1 2010-10-29
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- homeDetail.asp AD_ID SELECT rev 6 2010-10-29
snort ET WEB_SPECIFIC_APPS Enthrallweb eClassifieds SQL Injection Attempt -- dirSub.asp sid DELETE rev 7 2010-10-29
snort ET TROJAN Generic Checkin - MSCommonInfoEx rev 4 2010-10-29
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- types.asp TYPE_ID UPDATE rev 6 2010-10-29
snort ET WEB_SPECIFIC_APPS Enthrallweb eHomes SQL Injection Attempt -- types.asp TYPE_ID UNION SELECT rev 5 2010-10-29
snort ET TROJAN Lop.gfr/Swizzor HTTP Update/Checkin rev 8 2010-10-29