Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata GPL RPC portmap UNSET attempt TCP 111 rev 7 2024-03-08
suricata GPL EXPLOIT /iisadmpwd/aexp2.htr access rev 14 2024-03-08
suricata ET WEB_SERVER SLIGHTPULSE WebShell Access Inbound M3 rev 2 2024-03-08
suricata GPL RPC portmap cachefsd request TCP rev 13 2024-03-08
suricata GPL SQL Oracle iSQLPlus login.uix username overflow attempt rev 8 2024-03-08
suricata GPL TELNET root login rev 10 2024-03-08
suricata GPL RPC portmap admind request TCP rev 11 2024-03-08
suricata GPL SQL MYSQL root login attempt rev 5 2024-03-08
suricata GPL SQL user name buffer overflow attempt rev 5 2024-03-08
suricata GPL FTP shadow retrieval attempt rev 8 2024-03-08
suricata ET INFO Observed Let's Encrypt Certificate from Retired Intermediate rev 3 2024-03-08
suricata GPL FTP pass wh00t rev 9 2024-03-08
suricata GPL EXPLOIT cmd? access rev 13 2024-03-08
suricata GPL RPC mountd TCP mount path overflow attempt rev 9 2024-03-08
suricata GPL FTP APPE overflow attempt rev 12 2024-03-08
suricata GPL RPC portmap proxy attempt TCP rev 8 2024-03-08
suricata GPL NETBIOS SMB startup folder unicode access rev 6 2024-03-08
suricata GPL RPC snmpXdmi overflow attempt TCP rev 16 2024-03-08
suricata ET MALWARE Webshell Landing Outbound - Possibly Iran-based rev 2 2024-03-08
suricata GPL RPC portmap selection_svc request TCP rev 12 2024-03-08
suricata GPL FTP CWD ~ attempt rev 13 2024-03-08
suricata GPL FTP iss scan rev 9 2024-03-08
suricata GPL FTP SITE overflow attempt rev 13 2024-03-08
suricata GPL FTP PORT bounce attempt rev 3 2024-03-08
suricata GPL EXPLOIT ISAPI .ida attempt rev 15 2024-03-08
suricata GPL FTP CWD overflow attempt rev 25 2024-03-08
suricata ET MALWARE Win32/RisePro CnC Server Response M1 rev 2 2024-03-08
suricata GPL SCAN nessus 2.x 404 probe rev 5 2024-03-08
suricata GPL MISC rsh froot rev 7 2024-03-08
suricata GPL RPC CMSD TCP CMSD_CREATE buffer overflow attempt rev 11 2024-03-08
suricata GPL SQL xp_cmdshell program execution rev 8 2024-03-08
suricata GPL SQL sp_delete_alert log file deletion rev 7 2024-03-08
suricata GPL RPC portmap nisd request TCP rev 13 2024-03-08
suricata GPL EXPLOIT sp_start_job - program execution rev 8 2024-03-08
suricata GPL RPC CMSD TCP CMSD_INSERT buffer overflow attempt rev 14 2024-03-08
suricata GPL TELNET TELNET login failed rev 11 2024-03-08
suricata GPL MISC CVS invalid user authentication response rev 6 2024-03-08
suricata ET EXPLOIT GoCD Authentication Bypass URI Path - add-on rev 2 2024-03-08
suricata GPL MISC CVS missing cvsroot response rev 4 2024-03-08
suricata ET MALWARE Win32/RisePro CnC Server Response M3 rev 2 2024-03-08