Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT PCMan FTP Server 2.0.7 Remote Command Execution rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro rubrika.php idr Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.at.tf domain rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Hubscript XSS Attempt rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS DevelopItEasy Photo Gallery cat_id parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Win32/Dofoil.L Checkin rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Miva Merchant Cross Site Scripting Attack rev 9 2024-03-06
suricata ET WORM TheMoon.linksys.router 2 rev 6 2024-03-06
suricata ET MALWARE KeyBoy Backdoor Login rev 3 2024-03-06
suricata ET MALWARE Backdoor.Win32.Fynloski.A/DarkRat Checkin Outbound rev 11 2024-03-06
suricata ET INFO Unsupported/Fake FireFox Version 1. rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Online Grades parents.php ADD Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.co.tv domain rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS GS Real Estate Portal email.php AgentID Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE W32/Trojan-Gypikon Server Check-in Response rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter contacts.php idc Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE x0Proto Ping rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS cfagcms right.php title Parameter SQL Injection rev 7 2024-03-06
suricata ET VOIP Possible Misuse Call from Cisco ooh323 rev 3 2024-03-06
suricata ET MALWARE Poweliks Clickfraud CnC M3 rev 5 2024-03-06
suricata ET WEB_SERVER /etc/shadow Detected in URI rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Hubscript PHPInfo Attempt rev 8 2024-03-06
suricata ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 2 rev 5 2024-03-06
suricata ET WEB_SERVER WEB-PHP phpinfo access rev 6 2024-03-06
suricata ET INFO request for hide-my-ip.com autoupdate rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Telephone Directory 2008 edit1.php code Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS VS Panel showcat.php Cat_ID Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO Possible Firefox Plugin install rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.edu.tf domain rev 6 2024-03-06
suricata ET MALWARE Win32/Nitol.A Checkin rev 8 2024-03-06
suricata ET WEB_SERVER Insomnia Shell HTTP Request rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS ReVou Micro Blogging user_updates.php user Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SERVER Cisco IOS HTTP Server Exec Command Execution Attempt rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS DevelopItEasy Photo Gallery photo_id parameter SQL Injection rev 9 2024-03-06
suricata ET HUNTING SUSPICIOUS XXTEA UTF-16 Encoded HTTP Response rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro galeri_info.php lang Parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT_KIT Redirect to driveby sid=mix rev 4 2024-03-06
suricata ET SMTP Abuseat.org Block Message rev 5 2024-03-06
suricata ET EXPLOIT TP-LINK TL-WR750N DNS Change GET Request rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Scripts For Sites EZ e-store searchresults.php where Parameter SQL Injection rev 7 2024-03-06