Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET FTP Possible FTP Daemon Username UPDATE SET SQL Injection Attempt rev 2 2010-07-30
snort ET WEB_SPECIFIC_APPS Synactis All_IN_THE_BOX ActiveX SaveDoc Method Arbitrary File Overwrite rev 3 2010-07-30
snort ET SCAN Internal to Internal UPnP Request tcp port 2555 rev 3 2010-07-30
snort ET P2P TOR 1.0 Status Update rev 5 2010-07-30
snort ET TROJAN Conficker/MS08-067 Worm Traffic Outbound rev 6 2010-07-30
snort ET CHAT GaduGadu Chat Keepalive PING rev 3 2010-07-30
snort ET CHAT GaduGadu Chat File Send Begin rev 3 2010-07-30
snort ET CHAT GaduGadu Chat File Send Request rev 3 2010-07-30
snort ET POLICY Proxy TRACE Request - inbound rev 9 2010-07-30
snort ET GAMES Guild Wars connection rev 5 2010-07-30
snort ET P2P Soulseek Filesearch Results rev 6 2010-07-30
snort ET SCAN Non-Allowed Host Tried to Connect to MySQL Server rev 2 2010-07-30
snort ET POLICY RemoteControlX rctrlx service created rev 2 2010-07-30
snort ET TROJAN Socks666 Connect Command Packet rev 5 2010-07-30
snort ET TROJAN Banker Trojan CnC AddNew Command rev 3 2010-07-30
snort ET POLICY Netop Remote Control Usage rev 5 2010-07-30
snort ET FTP Possible FTP Daemon Username DELETE FROM SQL Injection Attempt rev 2 2010-07-30
snort ET TROJAN Yoda's Protector Packed Binary - VERY Likely Hostile rev 2 2010-07-30
snort ET SCAN Multiple FTP Root Login Attempts from Single Source - Possible Brute Force Attempt rev 3 2010-07-30
snort ET CHAT GaduGadu Chat Receive Message rev 3 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter UNION SELECT SQL Injection Attempt rev 2 2010-07-30
snort ET TROJAN Codesoft PW Stealer Email Report Outbound rev 2 2010-07-30
snort ET SCAN External to Internal UPnP Request tcp port 2555 rev 5 2010-07-30
snort ET POLICY Google Talk TLS Client Traffic rev 4 2010-07-30
snort ET P2P Kazaa over UDP rev 5 2010-07-30
snort ET TFTP Outbound TFTP ACK rev 3 2010-07-30
snort ET WEB_SERVER Possible Cherokee Web Server GET AUX Request Denial Of Service Attempt rev 2 2010-07-30
snort ET TFTP Outbound TFTP Error Message rev 3 2010-07-30
snort ET CHAT GaduGadu Chat File Send Details rev 3 2010-07-30
snort ET P2P Soulseek rev 7 2010-07-30
snort ET TFTP Outbound TFTP Data Transfer rev 3 2010-07-30
snort ET WEB_SPECIFIC_APPS Openfire Jabber-Server type Parameter SELECT FROM SQL Injection Attempt rev 2 2010-07-30
snort ET TROJAN Gimmiv Infection Ping Outbound rev 3 2010-07-30
snort ET CHAT GaduGadu Chat File Send Accept rev 3 2010-07-30
snort ET FTP Possible FTP Daemon Username INTO OUTFILE SQL Injection Attempt rev 2 2010-07-30
snort ET CHAT ICQ Message rev 5 2010-07-30
snort ET CHAT ICQ Login rev 5 2010-07-30
snort ET WEB_SPECIFIC_APPS Yahoo CD Player ActiveX Open Stack Overflow Attempt rev 2 2010-07-30
snort ET SCAN MYSQL 4.0 brute force root login attempt rev 6 2010-07-30
snort ET EXPLOIT libPNG - Possible integer overflow in allocation in png_handle_sPLT rev 9 2010-07-30