Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Signed TLS Certificate with md5WithRSAEncryption rev 4 2024-03-06
suricata ET EXPLOIT Generic ADSL Router DNS Change POST Request rev 5 2024-03-06
suricata ET WEB_SERVER Possible MySQL SQLi Attempt Information Schema Access rev 4 2024-03-06
suricata ET MALWARE Cashout Proxy Bot reg_DST rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS programsrating postcomments.php id XSS attempt rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz num_questions.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 2 rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Maran PHP Shop id Parameter Remote SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS RSS Simple News news.php pid parameter Remote SQL Injection rev 8 2024-03-06
suricata ET VOIP Possible Misuse Call from Cisco ooh323 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS YourFreeWorld Classifieds Blaster tr.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO InstallIQ Updater Software request rev 5 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - ipconfig - PRIVMSG Command rev 5 2024-03-06
suricata ET MALWARE Unknown Trojan Downloading PE via MSSQL Connection to Non-Standard Port rev 2 2024-03-06
suricata ET GAMES MINECRAFT Server response inbound rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter contacts.php idc Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Telephone Directory 2008 edit1.php code Parameter SQL Injection rev 7 2024-03-06
suricata ET FTP Outbound Java Downloading jar over FTP rev 4 2024-03-06
suricata ET HUNTING SUSPICIOUS *.rar.exe in HTTP URL rev 5 2024-03-06
suricata ET INFO Unsupported/Fake FireFox Version 2. rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS VS Panel showcat.php Cat_ID Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS SHOP-INET show_cat2.php grid Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Backdoor.Win32.Pushdo.s Checkin rev 6 2024-03-06
suricata ET MALWARE Shady RAT Put File Command rev 3 2024-03-06
suricata ET SCAN Multiple MySQL Login Failures Possible Brute Force Attempt rev 5 2024-03-06
suricata ET INFO Unsupported/Fake Internet Explorer Version MSIE 2. rev 7 2024-03-06
suricata ET SCAN SQLNinja MSSQL User Scan rev 6 2024-03-06
suricata ET INFO HTTP Request to a *.co.tv domain rev 6 2024-03-06
suricata ET INFO IRC Nick change on non-standard port rev 18 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz high_score_web.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS DeltaScripts PHP Classifieds siteid parameter Remote SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS cfagcms right.php title Parameter SQL Injection rev 7 2024-03-06
suricata ET SCAN SQLNinja MSSQL Database User Rights Scan rev 6 2024-03-06
suricata ET MALWARE Poweliks Clickfraud CnC M3 rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS JobHut browse.php pk Parameter SQL Injection rev 8 2024-03-06
suricata ET ATTACK_RESPONSE Backdoor reDuh http tunnel rev 8 2024-03-06
suricata ET CHAT Facebook Chat using XMPP rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Online Grades parents.php ADD Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Backdoor.Win32.Fynloski.A/DarkRat Checkin Outbound rev 11 2024-03-06
suricata ET MALWARE MS Remote Desktop micros User Login Request rev 4 2024-03-06