Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Mal/Ransom-CE Connectivity Check rev 4 2024-04-08
snort ET TROJAN Zberp receiving config via image file - SET rev 9 2024-04-08
snort ET TROJAN Possible Kelihos.F EXE Download Common Structure 2 rev 4 2024-04-08
suricata ET ACTIVEX Possible Edraw Diagram Component 5 ActiveX LicenseName Access Potential buffer overflow DOS rev 4 2024-04-08
suricata ET ACTIVEX Possible Autodesk MapGuide Viewer ActiveX LayersViewWidth Method Access Denial of Service rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS MindTouch Deki Wiki wgDekiPluginPath parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress Simple Download Button Shortcode Plugin Arbitrary File Disclosure Vulnerability rev 6 2024-04-08
suricata ET INFO JAVA - Java Class Download By Vulnerable Client rev 10 2024-04-08
suricata ET ACTIVEX ASUS Net4Switch ActiveX CxDbgPrint Format String Function Call Attempt rev 4 2024-04-08
suricata ET ACTIVEX Possible Crystal Reports Viewer Activex Control ServerResourceVersion Insecure Method Access rev 4 2024-04-08
suricata ET ACTIVEX EdrawSoft Office Viewer Component ActiveX FtpUploadFile Stack Buffer Overflow rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS MindTouch Deki Wiki link.php Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_media file parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET SCADA Sunway ForceControl Activex Control Vulnerability rev 5 2024-04-08
suricata ET ACTIVEX Possible Oracle AutoVue ActiveX SetMarkupMode Method Access Remote Code Execution rev 5 2024-04-08
suricata ET ACTIVEX Possible Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute rev 4 2024-04-08
suricata ET ACTIVEX Possible AdminStudio Activex Control LaunchProcess Method Access Arbitrary Code Execution rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla Bsadv controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX Possible AOL ICQ ActiveX Control DownloadAgent Method Access Arbitrary File Download and Execute 2 rev 4 2024-04-08
suricata ET MALWARE Win32/Ponmocup.A Checkin rev 8 2024-04-08
suricata ET ACTIVEX Possible Camera Stream Client Possible ActiveX Control SetDirectory Method Access Buffer Overflow rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS WHMCompleteSolution templatefile Parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_acooldebate controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_catalogue controller parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS joomla com_jstore controller parameter Local File Inclusion vulnerability rev 4 2024-04-08
suricata ET ACTIVEX ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_joomtouch controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET EXPLOIT_KIT NuclearPack - Landing Page Received - applet archive=32CharHex rev 5 2024-04-08
suricata ET INFO SN and CN From MS TS Revoked Cert Chain Seen rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_fundhelp controller Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_picasa2gallery controller parameter Local File Inclusion vulnerability rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_g2bridge controller parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS MindTouch Deki Wiki deki_plugin.php Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_rule controller Local File Inclusion Attempt rev 5 2024-04-08
suricata ET MALWARE OS X Backdoor Checkin rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla Jotloader component section parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET INFO Bomgar Remote Assistance Tool Download rev 5 2024-04-08
suricata ET SCADA Sunway ForceControl Activex Control Remote Code Execution Vulnerability 2 rev 6 2024-04-08
suricata ET WEB_CLIENT Internet Explorer CTableRowCellsCollectionCacheItem.GetNext Memory Use-After-Free Attempt rev 4 2024-04-08
suricata ET ACTIVEX Possible WinZip FileView ActiveX CreateNewFolderFromName Method Access Buffer Overflow rev 4 2024-04-08