Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS Audins Audiens SQL Injection Attempt -- index.php PHPSESSID UNION SELECT rev 6 2010-10-16
snort ET WEB_SPECIFIC_APPS Auto Listings Script moreinfo.php itemno Parameter SQL Injection rev 4 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp kullanici UPDATE rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp parola DELETE rev 6 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp parola UPDATE rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp kullanici SELECT rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS BPG-InfoTech Content Management System SQL Injection Attempt -- publications_list.asp vjob UNION SELECT rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS BPG-InfoTech Content Management System SQL Injection Attempt -- publications_list.asp vjob SELECT rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS Audins Audiens SQL Injection Attempt -- index.php PHPSESSID INSERT rev 6 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp parola SELECT rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS AvailScript Article Script articles.php aIDS Parameter SQL Injection rev 4 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp kullanici UNION SELECT rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp parola INSERT rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp kullanici INSERT rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS Autos catid SQL Injection rev 4 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp kullanici DELETE rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS Audins Audiens SQL Injection Attempt -- index.php PHPSESSID DELETE rev 6 2010-10-16
snort ET WEB_SPECIFIC_APPS Audins Audiens SQL Injection Attempt -- index.php PHPSESSID SELECT rev 6 2010-10-16
snort ET WEB_SPECIFIC_APPS Aspee and Dogantepe Ziyaretci Defteri SQL Injection Attempt -- giris.asp parola UNION SELECT rev 5 2010-10-16
snort ET WEB_SPECIFIC_APPS Audins Audiens SQL Injection Attempt -- index.php PHPSESSID UPDATE rev 6 2010-10-16
snort ET WEB_SPECIFIC_APPS Aktueldownload Haber script SQL Injection Attempt -- rss.asp kid UPDATE rev 7 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX Snapshot Method Buffer Overflow Attempt rev 5 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX _DownloadPBControl Method Buffer Overflow Attempt rev 4 2010-10-15
snort ET WEB_CLIENT FakeAV scanner page encountered Initializing Virus Protection System rev 2 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX _DownloadPBClose Method Buffer Overflow Attempt rev 4 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX _DownloadPBOpen Method Buffer Overflow Attempt rev 5 2010-10-15
snort ET WEB_SPECIFIC_APPS Alan Ward A-Cart Pro SQL Injection Attempt -- product.asp productid SELECT rev 8 2010-10-15
snort ET TROJAN Lethic Spambot CnC Initial Connect rev 5 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX SendCommand Method Buffer Overflow Attempt rev 4 2010-10-15
snort ET TROJAN Carberp checkin task rev 6 2010-10-15
snort ET ACTIVEX AVTECH Software ActiveX Login Method Buffer Oveflow Attempt rev 4 2010-10-15
snort ET SCAN Inspathx Path Disclosure Scanner User-Agent Detected rev 2 2010-10-13
snort ET ACTIVEX AoA Audio Extractor ActiveX Control Buffer Overflow Attempt rev 1 2010-10-13
snort ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter DELETE FROM SQL Injection Attempt rev 4 2010-10-09
snort ET WEB_SERVER Possible 3Com OfficeConnect Router Default User Account Remote Command Execution Attempt rev 4 2010-10-09
snort ET EXPLOIT Linksys WAP54G debug.cgi Shell Access as Gemtek rev 5 2010-10-06
snort ET TROJAN Tibs Checkin rev 5 2010-10-05
snort ET TROJAN WindowsEnterpriseSuite FakeAV get_product_domains.php rev 4 2010-10-05
snort ET TROJAN Zlob Updating via HTTP rev 5 2010-10-05
snort ET POLICY Metacafe.com Social Site Access rev 5 2010-10-05