Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS ClipShare Pro channel_detail.php chid Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Experts answer.php question_id parameter SQL Injection rev 8 2024-03-06
suricata ET INFO TLS possible TOR SSL traffic rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Easyedit CMS page.php intpageID parameter sql injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS DeluxeBB misc.php qorder Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz high_score.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Win32/Neutrino Bot Fake 404 Checkin Response rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS ParsBlogger blog.asp wr parameter Remote SQL Injection rev 7 2024-03-06
suricata ET SMTP Abuseat.org Block Message rev 5 2024-03-06
suricata ET SCAN Acunetix Version 6 Crawl/Scan Detected rev 9 2024-03-06
suricata ET EXPLOIT TP-LINK TL-WR750N DNS Change GET Request rev 5 2024-03-06
suricata ET SCAN SQLNinja MSSQL Version Scan rev 5 2024-03-06
suricata ET MALWARE Shady RAT Relay Command rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS YourFreeWorld Reminder Service tr.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - The command completed successfully - PRIVMSG Response rev 5 2024-03-06
suricata ET MALWARE Win32/Kelihos.F Checkin rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Kalptaru Infotech Automated Link Exchange Portal cat_id Parameter SQL Injection rev 8 2024-03-06
suricata ET DOS Terse HTTP GET Likely LOIC rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS ReVou Micro Blogging user_updates.php user Parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT TP-LINK TL-WR841N Router DNS Change GET Request rev 5 2024-03-06
suricata ET MALWARE Backdoor.Win32.Sykipot Put rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz results_table_web.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL Java WriteFile in URI rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Harlandscripts Pro Traffic One mypage.php trg Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS TurnkeyForms Business Survey Pro id parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.sg.tf domain rev 8 2024-03-06
suricata ET MALWARE BlackEnergy v2.x Plugin Download Request rev 8 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - net user - PRIVMSG Command rev 5 2024-03-06
suricata ET EXPLOIT xp_readerrorlogs access rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz answers.php order_number Parameter SQL Injection rev 8 2024-03-06
suricata ET SMTP Robtex.com Block Message rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS DvBBS boardrule.php groupboardid Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Bifrose Response from Controller rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS MyioSoft EasyBookMarker Parent parameter SQL Injection rev 9 2024-03-06
suricata ET MALWARE IOS.Oneclickfraud HTTP Host rev 4 2024-03-06
suricata ET INFO HTTP Request to a *.co.com.au domain rev 5 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass share_editor.cgi rev 4 2024-03-06
suricata ET MALWARE DirectsX Checkin Response rev 4 2024-03-06
suricata ET INFO MS Remote Desktop POS User Login Request rev 2 2024-03-06
suricata ET EXPLOIT_KIT Redirect to driveby sid=mix rev 4 2024-03-06