Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Joomla XGallery com_xgallery Component Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_CLIENT Adobe Acrobat newfunction Remote Code Execution Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS jQuery Mega Menu Wordpress Plugin Local File Inclusion Attempt rev 6 2024-04-09
suricata ET MALWARE Win32/TrojanDownloader.Chekafe.D User-Agent my_check_data On Off HTTP Port rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS LightNEasy File Manager language Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of substr % Encoding rev 5 2024-04-09
suricata ET SHELLCODE Hex Obfuscated JavaScript NOP SLED rev 4 2024-04-09
suricata ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript NOP SLED rev 4 2024-04-09
suricata ET ACTIVEX LEADTOOLS Imaging LEADSmtp ActiveX SaveMessage Method Vulnerability rev 4 2024-04-09
suricata ET SHELLCODE Common %u0c0c%u0c0c UTF-16 Heap Spray String rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS WordPress XCloner Plugin cloner.cron.php config Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Adobe Acrobat Util.printf Buffer Overflow Attempt rev 4 2024-04-09
suricata ET SHELLCODE Common %0c%0c%0c%0c Heap Spray String rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS bug_actiongroup_page.php script Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-1 rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS TFTgallery adminlangfile Parameter Local File inclusion Attempt rev 5 2024-04-09
suricata ET ACTIVEX AVTECH Software ActiveX Snapshot Method Buffer Overflow Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT PDF With Embedded Adobe Shockwave Flash Possibly Related to Remote Code Execution Attempt rev 7 2024-04-09
suricata ET SHELLCODE Possible %u0d0d%u0d0d UTF-16 Heap Spray Attempt rev 4 2024-04-09
suricata ET WEB_CLIENT Android Webkit removeChild Use-After-Free Remote Code Execution Attempt rev 3 2024-04-09
suricata ET SCAN Havij SQL Injection Tool User-Agent Outbound rev 4 2024-04-09
suricata ET ACTIVEX Microsoft DirectX 9 ActiveX Control Format String Function Call rev 6 2024-04-09
suricata ET EXPLOIT_KIT Redirection to driveby Page Home index.php rev 6 2024-04-09
suricata ET USER_AGENTS Suspicious User-Agent SimpleClient 1.0 rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Abtp Portal Project skel_null.php Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS bug_actiongroup_ext_page.php script Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS ClanSphere CurrentFolder Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS WeBid active_auctions.php lan Parameter Local File inclusion Attempt rev 6 2024-04-09
suricata ET MALWARE Winsoft.E Checkin 3 rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS OrangeHRM uri Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of replace Javascript Function %u UTF-16 Encoding rev 6 2024-04-09
suricata ET SHELLCODE Possible 0x0d0d0d0d Heap Spray Attempt rev 4 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of replace Javascript Function %u UTF-8 Encoding rev 6 2024-04-09
suricata ET MALWARE Win32/Banbra Banking Trojan Communication rev 5 2024-04-09
suricata ET ACTIVEX AVTECH Software ActiveX Login Method Buffer Oveflow Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS axdcms aXconf Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET SHELLCODE Possible UTF-8 %u90 NOP SLED rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla JGrid Component File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS LetoDMS lang Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET SHELLCODE Possible 0x0c0c0c0c Heap Spray Attempt rev 4 2024-04-09