Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY POSSIBLE Web Crawl using Curl rev 8 2010-09-22
snort ET SCAN Stompy Web Application Session Scan rev 4 2010-09-21
snort ET POLICY External Unencrypted Connection To Aanval Console rev 3 2010-09-21
snort ET SCAN Wikto Scan rev 6 2010-09-21
snort ET SCAN Smap VOIP Device Scan rev 7 2010-09-21
snort ET SCAN Wapiti Web Server Vulnerability Scan rev 8 2010-09-21
snort ET POLICY External Unencrypted Connection to BASE Console rev 3 2010-09-21
snort ET POLICY Inbound Frequent Emails - Possible Spambot Inbound rev 10 2010-09-21
snort ET POLICY AOL Webmail Message Send rev 8 2010-09-21
snort ET SCAN Wikto Backend Data Miner Scan rev 7 2010-09-21
snort ET SCAN Sipsak SIP scan rev 4 2010-09-21
snort ET SCAN w3af Scan In Progress ARGENTINA Req Method rev 6 2010-09-21
snort ET SCAN SIP erase_registrations/add registrations attempt rev 5 2010-09-21
snort ET SCAN Sipvicious Scan rev 6 2010-09-21
snort ET SCAN Possible WafWoof Web Application Firewall Detection Scan rev 4 2010-09-21
snort ET SCAN Possible DavTest WebDav Vulnerability Scanner Initial Check Detected rev 4 2010-09-21
snort ET POLICY Outbound Multiple Non-SMTP Server Emails rev 12 2010-09-21
snort ET SNMP Attempted UDP Access Attempt to Cisco IOS 12.1 Hidden Read/Write Community String cable-docsis rev 4 2010-09-21
snort ET SCAN WSFuzzer Web Application Fuzzing rev 7 2010-09-21
snort ET SCAN Sivus VOIP Vulnerability Scanner SIP Scan rev 6 2010-09-21
snort ET ATTACK_RESPONSE Metasploit Meterpreter Registry Interation Detected rev 4 2010-09-20
snort ET SCAN Httprint Web Server Fingerprint Scan rev 6 2010-09-20
snort ET ATTACK_RESPONSE Weak Netbios Lanman Auth Challenge Detected rev 10 2010-09-20
snort ET WEB_SPECIFIC_APPS ASPMForum SQL Injection Attempt -- forum.asp baslik UNION SELECT rev 7 2010-09-19
snort ET TROJAN Waledac Beacon Traffic Detected rev 3 2010-09-16
snort ET SCAN Nessus User Agent rev 12 2010-09-15
snort ET ATTACK_RESPONSE x2300 phpshell detected rev 6 2010-09-13
snort ET WEB_SERVER PHP Scan Precursor rev 3 2010-09-11
snort ET WEB_SERVER Possible Cisco PIX/ASA HTTP Web Interface HTTP Response Splitting Attempt rev 3 2010-09-11
snort ET WEB_SERVER Attempt To Access MSSQL xp_readerrorlogs Stored Procedure Via URI to View Error Logs rev 5 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL sp_adduser Stored Procedure Via URI to Create New Database User rev 5 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL xp_enumerrorlogs Stored Procedure Via URI to View Error Logs rev 5 2010-09-09
snort ET WEB_SERVER SQL sp_delete_alert attempt rev 5 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL xp_fileexist Stored Procedure Via URI to Locate Files On Disk rev 5 2010-09-09
snort ET WEB_SERVER SHOW CHARACTER SET SQL Injection Attempt in URI rev 3 2010-09-09
snort ET WEB_SERVER SHOW TABLES SQL Injection Attempt in URI rev 3 2010-09-09
snort ET WEB_SERVER SQL sp_start_job attempt rev 5 2010-09-09
snort ET WEB_SERVER Attempt To Access MSSQL xp_cmdshell Stored Procedure Via URI rev 5 2010-09-09
snort ET WEB_SERVER Attack Tool Revolt Scanner rev 56 2010-09-09
snort ET WEB_SERVER SQL sp_password attempt rev 5 2010-09-09