Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET SHELLCODE Rothenburg Shellcode rev 3 2010-07-30
snort ET SCAN MYSQL 4.1 brute force root login attempt rev 4 2010-07-30
snort ET P2P TOR 1.0 Status Update rev 5 2010-07-30
snort ET SCAN Multiple FTP Administrator Login Attempts from Single Source - Possible Brute Force Attempt rev 3 2010-07-30
snort ET FTP Possible FTP Daemon Username UPDATE SET SQL Injection Attempt rev 2 2010-07-30
snort ET VOIP INVITE Message Flood UDP rev 1 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter UPDATE SET SQL Injection Attempt rev 2 2010-07-30
snort ET WEB_SPECIFIC_APPS Yahoo CD Player ActiveX Open Stack Overflow Attempt rev 2 2010-07-30
snort ET POLICY Netop Remote Control Usage rev 5 2010-07-30
snort ET FTP Possible FTP Daemon Username INTO OUTFILE SQL Injection Attempt rev 2 2010-07-30
snort ET TROJAN Socks666 Connect Command Packet rev 5 2010-07-30
snort ET CHAT GaduGadu Chat File Send Details rev 3 2010-07-30
snort ET TROJAN Conficker/MS08-067 Worm Traffic Outbound rev 6 2010-07-30
snort ET TROJAN Banker Trojan CnC AddNew Command rev 3 2010-07-30
snort ET TROJAN Yoda's Protector Packed Binary - VERY Likely Hostile rev 2 2010-07-30
snort ET TFTP Outbound TFTP Data Transfer rev 3 2010-07-30
snort ET VOIP INVITE Message Flood TCP rev 4 2010-07-30
snort ET CHAT ICQ Status Invisible rev 5 2010-07-30
snort ET CHAT GaduGadu Chat Keepalive PING rev 3 2010-07-30
snort ET CHAT GaduGadu Chat File Send Begin rev 3 2010-07-30
snort ET FTP Possible FTP Daemon Username DELETE FROM SQL Injection Attempt rev 2 2010-07-30
snort ET POLICY RemoteControlX rctrlx service created rev 2 2010-07-30
snort ET POLICY Dameware Remote Control Service Install rev 5 2010-07-30
snort ET GAMES Gold VIP Club Casino Client in Use rev 5 2010-07-30
snort ET FTP Possible FTP Daemon Username UNION SELECT SQL Injection Attempt rev 2 2010-07-30
snort ET GAMES Guild Wars connection rev 5 2010-07-30
snort ET POLICY Google Talk TLS Client Traffic rev 4 2010-07-30
snort ET TROJAN Backdoor.Win32.VB.brg C&C Checkin rev 5 2010-07-30
snort ET CHAT GaduGadu Chat Server Available Status Packet rev 3 2010-07-30
snort ET FTP Possible FTP Daemon Username SELECT FROM SQL Injection Attempt rev 2 2010-07-30
snort ET P2P Kazaa over UDP rev 5 2010-07-30
snort ET POLICY Cisco Device New Config Built rev 9 2010-07-30
snort ET VOIP Multiple Unauthorized SIP Responses TCP rev 6 2010-07-30
snort ET CHAT Facebook Chat using XMPP rev 4 2010-07-30
snort ET CHAT GaduGadu Chat Receive Message rev 3 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter UNION SELECT SQL Injection Attempt rev 2 2010-07-30
snort ET SCAN Amap TCP Service Scan Detected rev 2 2010-07-30
snort ET SCAN Internal to Internal UPnP Request tcp port 2555 rev 3 2010-07-30
snort ET P2P GnucDNA UDP Ultrapeer Traffic rev 3 2010-07-30
snort ET SCAN Multiple FTP Root Login Attempts from Single Source - Possible Brute Force Attempt rev 3 2010-07-30