Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ACTIVEX SoftArtisans XFile FileManager ActiveX DeleteFile method stack overflow Attempt rev 4 2024-04-10
suricata ET ACTIVEX Dart Communications PowerTCP FTP for ActiveX DartFtp.dll Control Buffer Overflow rev 12 2024-04-10
suricata ET ATTACK_RESPONSE Possible ASPXSpy Related Activity rev 7 2024-04-10
suricata ET WEB_SPECIFIC_APPS playSMS init.php apps_path plug parameter local file inclusion rev 8 2024-04-10
suricata ET ACTIVEX Awingsoft Web3D Player Remote Buffer Overflow rev 10 2024-04-10
suricata ET WEB_SPECIFIC_APPS playSMS init.php apps_path themes parameter local file inclusion rev 8 2024-04-10
suricata ET ACTIVEX Multiple Altiris Products AeXNSConsoleUtilities.dll ActiveX Control BrowseAndSaveFile Method Buffer Overflow Attempt Function Call rev 10 2024-04-10
suricata ET WEB_SPECIFIC_APPS WeBid ST_countries.php include_path Parameter Local File Inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS Ultrize TimeSheet timesheet.php include_dir Parameter Local File Inclusion rev 7 2024-04-10
suricata ET WEB_SPECIFIC_APPS Joomla mediaslide component viewer.php path Local File Inclusion Attempt rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS Orlando CMS init.php GLOBALS Parameter Local File Inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS ExBB threadstop.php exbb Parameter Local File Inclusion rev 9 2024-04-10
suricata ET WEB_SPECIFIC_APPS Blogplus block_left.php Local File Inclusion rev 9 2024-04-10
suricata ET WEB_SPECIFIC_APPS beLive arch.php arch Parameter Local File Inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS Orlando CMS stage6.php GLOBALS Parameter Local File Inclusion rev 8 2024-04-10
snort ET TROJAN TDSS/TDL/Alureon MBR rootkit Checkin rev 19 2024-04-09
snort ET SCAN libwww-perl GET to // with specific HTTP header ordering without libwww-perl User-Agent rev 7 2024-04-09
snort ET SHELLCODE Unescape Variable Unicode Shellcode rev 2 2024-04-09
snort ET TROJAN Potential Blackhole Exploit Pack Binary Load Request rev 11 2024-04-09
snort ET TROJAN Zeus Bot Connectivity Check rev 22 2024-04-09
snort ET WEB_CLIENT PDF With Embedded Adobe Shockwave Flash Possibly Related to Remote Code Execution Attempt rev 5 2024-04-09
snort ET POLICY Executable served from Amazon S3 rev 6 2024-04-09
snort ET SHELLCODE Possible Unescape Encoded Content With Split String Obfuscation 2 rev 2 2024-04-09
snort ET WEB_CLIENT PDF With Adobe Audition Session File Handling Buffer Overflow Flowbit Set rev 2 2024-04-09
snort ET SHELLCODE Possible Unescape Encoded Content With Split String Obfuscation rev 2 2024-04-09
suricata ET SHELLCODE Unescape Variable Unicode Shellcode rev 3 2024-04-09
suricata ET ADWARE_PUP UBar Trojan/Adware Checkin 1 rev 6 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of unescape % Encoding rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Tiki Wiki CMS Groupware language Parameter Local File Inclusion Attempt rev 7 2024-04-09
suricata ET WEB_SPECIFIC_APPS DynPage dynpage_load.php file Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of eval %u UTF-16 Encoding rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Dolphin BxDolGzip.php file Disclosure Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS CultBooking lang parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS 724CMS section.php Module Parameter Local File inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS JE Ajax Event Calendar view Parameter Local File Inclusion Attempt rev 8 2024-04-09
suricata ET WEB_SPECIFIC_APPS SaschArt SasCam Webcam Server ActiveX Buffer Overflow Function Call rev 5 2024-04-09
suricata ET SHELLCODE Possible UTF-16 %u9090 NOP SLED rev 6 2024-04-09
suricata ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0d0d0d0d rev 4 2024-04-09
suricata ET ADWARE_PUP UBar Trojan/Adware Checkin 3 rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-3 rev 6 2024-04-09