Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/Enchanim Process List Dump rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Kalptaru Infotech Automated Link Exchange Portal cat_id Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Linux/dtool IRC Command Complete 2 rev 5 2024-03-06
suricata ET WEB_SERVER SQL sp_start_job attempt rev 8 2024-03-06
suricata ET EXPLOIT Possible dlink-DSL2640B DNS Change Attempt rev 5 2024-03-06
suricata ET EXPLOIT Netgear DGN1000B Router DNS Change GET Request rev 6 2024-03-06
suricata ET MALWARE IRC Bot Download http Command rev 6 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - The command completed successfully - PRIVMSG Response rev 5 2024-03-06
suricata ET INFO HTTP Request to a *.co.com.au domain rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Easyedit CMS news.php intPageID parameter sql injection rev 8 2024-03-06
suricata ET INFO HTTP Request to a *.c0m.li domain rev 5 2024-03-06
suricata ET MALWARE Linux/dtool IRC Command Complete 3 rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS AjaxPortal ajaxp_backend.php page Parameter SQL Injection rev 8 2024-03-06
suricata ET INFO Hotmail Compose Message Access rev 6 2024-03-06
suricata ET MALWARE Win32/Neutrino Bot Fake 404 Checkin Response rev 5 2024-03-06
suricata ET MALWARE Bifrose Response from Controller rev 5 2024-03-06
suricata ET INFO RemoteControlX rctrlx service created rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS MyioSoft EasyBookMarker Parent parameter SQL Injection rev 9 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass fw_sys_up.cgi rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS ReVou Micro Blogging user_updates.php user Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.us.tf domain rev 6 2024-03-06
suricata ET EXPLOIT_KIT Redirect to driveby sid=mix rev 4 2024-03-06
suricata ET MALWARE US-CERT TA14-353A Lightweight Backdoor 5 rev 3 2024-03-06
suricata ET ADWARE_PUP SurfAccuracy.com Spyware Updating rev 8 2024-03-06
suricata ET MALWARE MS Remote Desktop edc User Login Request rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS Experts answer.php question_id parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Trojan-Dropper.Win32.StartPage.dvm or Mebromi Bios Rootkit CnC Count Checkin rev 8 2024-03-06
suricata ET INFO possible Xiaomi phone data leakage HTTP rev 5 2024-03-06
suricata ET MALWARE Linux.Trojan.IptabLex Variant Checkin rev 2 2024-03-06
suricata ET INFO HTTP Request to a *.noc.su domain rev 5 2024-03-06
suricata ET INFO Kindle Fire Browser User-Agent Outbound rev 6 2024-03-06
suricata ET MALWARE Miniduke Checkin rev 8 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass share_editor.cgi rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS PozScripts Classified Auctions id parameter SQL Injection rev 7 2024-03-06
suricata ET SMTP Robtex.com Block Message rev 3 2024-03-06
suricata ET WEB_SERVER Onmouseover= in URI - Likely Cross Site Scripting Attempt rev 9 2024-03-06
suricata ET EXPLOIT SQL sp_configure attempt rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Scripts For Sites EZ e-store searchresults.php where Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Backdoor.Win32.Svlk Client Checkin rev 2 2024-03-06
suricata ET WEB_SERVER Possible WebLogic Admin Login With Default Creds rev 6 2024-03-06