Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Venalsur Booking Centre HotelID Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Backdoor Win32/Hupigon.CK Client Checkin rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS DS CMS DetailFile.php nFileId Parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT_KIT Redirect to DotkaChef EK Landing rev 6 2024-03-06
suricata ET MALWARE Linux.Trojan.IptabLex Variant Checkin rev 2 2024-03-06
suricata ET EXPLOIT Netgear DGN1000B Router DNS Change GET Request rev 6 2024-03-06
suricata ET EXPLOIT SQL sp_configure - configuration change rev 3 2024-03-06
suricata ET SCAN Springenwerk XSS Scanner User-Agent Detected rev 7 2024-03-06
suricata ET MALWARE Win32/Neutrino Bot Fake 404 Checkin Response rev 5 2024-03-06
suricata ET MALWARE Cookies/Cookiebag Checkin rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Scripts For Sites EZ e-store searchresults.php where Parameter SQL Injection rev 7 2024-03-06
suricata ET ADWARE_PUP SurfAccuracy.com Spyware Updating rev 8 2024-03-06
suricata ET WEB_SERVER Script tag in URI Possible Cross Site Scripting Attempt rev 9 2024-03-06
suricata ET INFO Kindle Fire Browser User-Agent Outbound rev 6 2024-03-06
suricata ET MALWARE IRC Bot Download http Command rev 6 2024-03-06
suricata ET INFO RemoteControlX rctrlx service created rev 3 2024-03-06
suricata ET WEB_SERVER Possible WebLogic Admin Login With Default Creds rev 6 2024-03-06
suricata ET INFO Hotmail Compose Message Access rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS AjaxPortal ajaxp_backend.php page Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE IRC DNS request on non-standard port rev 11 2024-03-06
suricata ET MALWARE US-CERT TA14-353A Lightweight Backdoor 5 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz results_table_web.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Win32.UFRStealer.A issuing MKD command FTP rev 7 2024-03-06
suricata ET MALWARE Knockbot Proxy Checkin rev 6 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass fw_sys_up.cgi rev 4 2024-03-06
suricata ET SMTP Abuseat.org Block Message rev 5 2024-03-06
suricata ET WEB_SERVER Cisco IOS HTTP Server Exec Command Execution Attempt rev 8 2024-03-06
suricata ET MALWARE Bifrose Response from Controller rev 5 2024-03-06
suricata ET MALWARE PWSteal.Bancos Generic Banker Trojan SCR Download rev 7 2024-03-06
suricata ET MALWARE Backdoor.Win32.Svlk Client Checkin rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS millionpixel payment.php order_id XSS attempt rev 7 2024-03-06
suricata ET MALWARE Linux/dtool IRC Command Complete 2 rev 5 2024-03-06
suricata ET EXPLOIT TP-LINK TL-WR750N DNS Change GET Request rev 5 2024-03-06
suricata ET INFO Nessus Vulnerability Scanner Plugins Update rev 7 2024-03-06
suricata ET HUNTING SUSPICIOUS *.pdf.exe in HTTP URL rev 4 2024-03-06
suricata ET EXPLOIT WNR2000v4 HTTP POST RCE Attempt Via Timestamp Discovery rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS SFS EZ Hotscripts-like Site software-description.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET EXPLOIT Possible ShuttleTech 915WM DNS Change Attempt rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Bugzilla token.cgi HPP e-mail validation bypass Attempt Client Body rev 8 2024-03-06
suricata ET MALWARE Georbot checkin rev 5 2024-03-06