Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE ATTACKER IRCBot - The command completed successfully - PRIVMSG Response rev 5 2024-03-06
suricata ET MALWARE DirectsX Checkin Response rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS ECShop user.php order_sn Parameter SQL Injection rev 7 2024-03-06
suricata ET SCAN SQLNinja MSSQL Version Scan rev 5 2024-03-06
suricata ET MALWARE BlackEnergy v2.x Plugin Download Request rev 8 2024-03-06
suricata ET SCAN FHScan core User-Agent Detect rev 7 2024-03-06
suricata ET EXPLOIT xp_readerrorlogs access rev 6 2024-03-06
suricata ET MALWARE Rogue.Win32/Winwebsec Install 2 rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Harlandscripts Pro Traffic One mypage.php trg Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 1 rev 5 2024-03-06
suricata ET MALWARE IRC DNS request on non-standard port rev 11 2024-03-06
suricata ET WEB_SPECIFIC_APPS YourFreeWorld Reminder Service tr.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET SCAN Acunetix Version 6 Crawl/Scan Detected rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS Joomla Full Path Disclosure -- content.php rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS Easyedit CMS news.php intPageID parameter sql injection rev 8 2024-03-06
suricata ET MALWARE IOS.Oneclickfraud HTTP Host rev 4 2024-03-06
suricata ET DOS Terse HTTP GET Likely LOIC rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS ReVou Micro Blogging user_updates.php user Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS YourFreeWorld Autoresponder hosting tr.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz high_score.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET SCAN MYSQL 4.1 brute force root login attempt rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Easyedit CMS page.php intpageID parameter sql injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS DevelopItEasy News And Article aid parameter SQL Injection rev 8 2024-03-06
suricata ET INFO HTTP Request to a *.co.com.au domain rev 5 2024-03-06
suricata ET EXPLOIT SQL sp_configure - configuration change rev 3 2024-03-06
suricata ET MALWARE Shady RAT Relay Command rev 3 2024-03-06
suricata ET INFO HTTP Request to a *.noc.su domain rev 5 2024-03-06
suricata ET MALWARE Snake rootkit usermode-centric encrypted command from server rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS DeluxeBB misc.php qorder Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Simple Customer contact.php SQL injection rev 7 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass share_editor.cgi rev 4 2024-03-06
suricata ET MALWARE Win32/Nitol.B Checkin rev 6 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - PRIVMSG Response - Directory Listing *nix rev 6 2024-03-06
suricata ET SMTP Abuseat.org Block Message rev 5 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - net user - PRIVMSG Command rev 5 2024-03-06
suricata ET MALWARE EvilGrab/Vidgrab Checkin rev 4 2024-03-06
suricata ET INFO RemoteControlX rctrlx service created rev 3 2024-03-06
suricata ET MALWARE Backdoor.Win32.Svlk Client Checkin rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS AjaxPortal ajaxp_backend.php page Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Win32/Neutrino Bot Fake 404 Checkin Response rev 5 2024-03-06