Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Joomla com_wisroyq controller parameter Local File Inclusion Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla Bsadv controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET INFO EXE - OSX Executable Download - Multi Arch w/PowerPC rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_visa controller Local File Inclusion Attempt rev 5 2024-04-08
suricata ET INFO Outdated Flash Version M1 rev 128 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress jRSS Widget url parameter Local File Inclusion Vulnerability rev 5 2024-04-08
suricata ET MALWARE Kelihos/Hlux GET jucheck.exe from CnC rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_hello controller parameter Local File Inclusion vulnerability rev 5 2024-04-08
suricata ET WEB_CLIENT PDF With Embedded U3D rev 4 2024-04-08
suricata ET ACTIVEX ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla je-media-player view parameter Local File Inclusion Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_catalogue controller parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET MALWARE Fareit/Pony Downloader Checkin 2 rev 14 2024-04-08
suricata ET ACTIVEX Possible Camera Stream Client Possible ActiveX Control SetDirectory Method Access Buffer Overflow rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Web File Browser file Parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_joomtouch controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX 2X ApplicationServer TuxSystem Class ActiveX Control ImportSettings Function Call Attempt rev 5 2024-04-08
suricata ET ACTIVEX Possible IBM Tivoli Provisioning Manager Express Isig.isigCtl.1 ActiveX RunAndUploadFile Method Overflow rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress WP Custom Pages url parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS WHMCompleteSolution templatefile Parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_acooldebate controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS OneFileCMS f parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET MALWARE Dyreza RAT Fake Server Header rev 7 2024-04-07
suricata ET MALWARE [CrowdStrike] ANCHOR PANDA - Adobe Gh0st Beacon rev 3 2024-04-07
suricata ET ADWARE_PUP W32/Stan Malvertising.Dropper CnC Beacon rev 6 2024-04-07
suricata ET MALWARE Possible Red October proxy CnC 2 rev 5 2024-04-07
suricata ET MALWARE Common Upatre URI/Headers Struct rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS simple machines forum include parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET WEB_SERVER HTTP POST Generic eval of base64_decode rev 5 2024-04-07
suricata ET MALWARE Win32/Toby.N Multilocker Checkin rev 6 2024-04-07
suricata ET MALWARE Unknown - Loader - Check .exe Updated rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Banana Dance name Parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE APT.Agtid callback rev 5 2024-04-07
suricata ET MALWARE Blue Bot DDoS Proxy Request rev 9 2024-04-07
suricata ET INFO Office Document Containing AutoExec Macro Via smtp rev 3 2024-04-07
suricata ET DOS HOIC with booster inbound rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS RIPS code.php Local File Inclusion Vulnerability rev 4 2024-04-07
suricata ET WEB_SERVER c99 Shell Backdoor Var Override Cookie rev 5 2024-04-07
suricata ET MALWARE Possible Stitur Secondary Download rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Amateur Photographer Image Gallery file parameter Local File Inclusion Attempt rev 4 2024-04-07