Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SERVER Onmouseover= in URI - Likely Cross Site Scripting Attempt rev 9 2024-03-06
suricata ET INFO Nessus Vulnerability Scanner Plugins Update rev 7 2024-03-06
suricata ET HUNTING SUSPICIOUS *.pdf.exe in HTTP URL rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Demium CMS tracking.php follow_kat Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - PRIVMSG Response - Directory Listing *nix rev 6 2024-03-06
suricata ET MALWARE Backdoor.TurlaCarbon.A C2 HTTP Request rev 4 2024-03-06
suricata ET SCAN Acunetix Version 6 Crawl/Scan Detected rev 9 2024-03-06
suricata ET ACTIVEX SaschArt SasCam Webcam Server ActiveX Control Head Method Buffer Overflow Attempt rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Easyedit CMS page.php intpageID parameter sql injection rev 8 2024-03-06
suricata ET EXPLOIT WNR2000v4 HTTP POST RCE Attempt Via Timestamp Discovery rev 5 2024-03-06
suricata ET EXPLOIT SQL sp_configure - configuration change rev 3 2024-03-06
suricata ET EXPLOIT xp_readerrorlogs access rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Kalptaru Infotech Automated Link Exchange Portal cat_id Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Win32/Neutrino Bot Fake 404 Checkin Response rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Wbstreet show.php id parameter Remote SQL Injection rev 7 2024-03-06
suricata ET INFO AOL Webmail Message Send rev 11 2024-03-06
suricata ET MALWARE Knockbot Proxy Checkin rev 6 2024-03-06
suricata ET HUNTING SUSPICIOUS XXTEA UTF-16 Encoded HTTP Response rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS AvailScript Article Script articles.php aIDS Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS MyioSoft EasyBookMarker Parent parameter SQL Injection rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS PozScripts Classified Auctions id parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS YourFreeWorld Reminder Service tr.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.upas.su domain rev 6 2024-03-06
suricata ET DOS Terse HTTP GET Likely GoodBye 5.2 DDoS tool rev 3 2024-03-06
suricata ET MALWARE Shady RAT Get File Command rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS DMXReady Multiple Products upload_image_category.asp cid Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS My PHP Dating id parameter SQL Injection rev 10 2024-03-06
suricata ET MALWARE FinFisher Malware Connection Handshake rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz question.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET INFO Possible Chrome Plugin install rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Lito Lite CMS cate.php cid parameter Remote SQL Injection rev 9 2024-03-06
suricata ET EXPLOIT Possible Pure-FTPd CVE-2014-6271 attempt rev 3 2024-03-06
suricata ET MALWARE Backdoor.Win32.Xtrat Checkin 2 rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Synactis All_IN_THE_BOX ActiveX SaveDoc Method Arbitrary File Overwrite rev 4 2024-03-06
suricata ET MALWARE CryptoLocker EXE Download rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.ch.tf domain rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Turnkeyforms Software Directory showcategory.php cid parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS FancyBox Remote Code Inclusion POST Request rev 8 2024-03-06
suricata ET MALWARE Georbot initial checkin rev 5 2024-03-06
suricata ET MALWARE Win32/Small.XR Checkin 2 WEBC2-CSON APT1 Related rev 7 2024-03-06