Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS WSN Guest SQL Injection Attempt -- comments.php id DELETE rev 6 2010-10-03
snort ET TROJAN Possible Infection Report Mail - Indy Mail lib and No Message Body - Priority 3 rev 8 2010-10-03
snort ET WEB_SPECIFIC_APPS WSN Guest SQL Injection Attempt -- comments.php id UNION SELECT rev 6 2010-10-03
snort ET WEB_SPECIFIC_APPS WSN Guest search.php search parameter SQL Injection rev 4 2010-10-03
snort ET WEB_SPECIFIC_APPS WSN Guest SQL Injection Attempt -- comments.php id INSERT rev 6 2010-10-03
snort ET WEB_SPECIFIC_APPS WSN Guest SQL Injection Attempt -- comments.php id SELECT rev 6 2010-10-03
snort ET TROJAN Win32.Lager Trojan Reporting rev 4 2010-10-03
snort ET WEB_SPECIFIC_APPS WSPortal SQL Injection Attempt -- content.php page UNION SELECT rev 6 2010-10-03
snort ET POLICY ICP Email Send via HTTP - Often Trojan Install Reports rev 3 2010-10-03
snort ET WEB_SPECIFIC_APPS WSPortal SQL Injection Attempt -- content.php page SELECT rev 6 2010-10-03
snort ET TROJAN Possible Infection Report Mail - Indy Mail lib and No Message Body - Priority 1 rev 8 2010-10-03
snort ET CHAT Google IM traffic Jabber client sign-on rev 5 2010-10-03
snort ET TROJAN SpamTool.Win32.Agent.gy/Grum/Tedroo Or Similar HTTP Checkin rev 4 2010-10-03
snort ET WEB_SPECIFIC_APPS WSN Guest SQL Injection Attempt -- comments.php id UPDATE rev 6 2010-10-03
snort ET TROJAN Gozi check-in / update rev 4 2010-10-03
snort ET WEB_SPECIFIC_APPS WSPortal SQL Injection Attempt -- content.php page INSERT rev 6 2010-10-03
snort ET TROJAN Hupigon URL Infection Checkin Detected rev 6 2010-10-03
snort ET P2P Tor Get Status Request rev 3 2010-10-03
snort ET TROJAN Win32.Lager Trojan Initial Checkin rev 4 2010-10-03
snort ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key UNION SELECT rev 6 2010-10-02
snort ET TROJAN Egspy Infection Report Email rev 3 2010-10-02
snort ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key DELETE rev 6 2010-10-02
snort ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key INSERT rev 6 2010-10-02
snort ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key UPDATE rev 6 2010-10-02
snort ET WEB_SPECIFIC_APPS Website Designs For Less Click N Print Coupons SQL Injection Attempt -- coupon_detail.asp key SELECT rev 6 2010-10-02
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay DELETE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id UNION SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay SELECT rev 6 2010-10-01
snort ET CHAT Gadu-Gadu Chat Client Checkin via HTTP rev 7 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay INSERT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UPDATE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UPDATE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay UPDATE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user SELECT rev 6 2010-10-01
snort ET TROJAN Common Downloader Install Count Tracking URL rev 3 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft INSERT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id DELETE rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UNION SELECT rev 6 2010-10-01
snort ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft DELETE rev 6 2010-10-01