Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS nicLOR CMS-School showarticle.php aID Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - netsh - PRIVMSG Command rev 5 2024-03-06
suricata ET MALWARE Possible Win32/Napolar.A URL Response rev 4 2024-03-06
suricata ET INFO HTTP Request to a *.be.ma domain rev 5 2024-03-06
suricata ET MALWARE Win32/Dofoil.L Checkin rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS AlstraSoft Video Share Enterprise album.php UID Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS JobHut browse.php pk Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Poweliks Clickfraud CnC M3 rev 5 2024-03-06
suricata ET VOIP Possible Misuse Call from Cisco ooh323 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS cfagcms right.php title Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter contacts.php idc Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE KeyBoy Backdoor Login rev 3 2024-03-06
suricata ET ACTIVEX Viscom Movie Player Pro SDK ActiveX DrawText method Buffer Overflow Function Call rev 3 2024-03-06
suricata ET SCAN Wikto Scan rev 10 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 5 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS CMS Faethon info.php item Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS AvailScript Photo Album Script pics.php sid Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT Linksys WRT54GL DNS Change GET Request rev 5 2024-03-06
suricata ET INFO HTTP Request to a *.uni.cc domain rev 6 2024-03-06
suricata ET INFO EXE - Served Attached HTTP rev 9 2024-03-06
suricata ET INFO HTTP Request to a *.qc.cx domain rev 5 2024-03-06
suricata ET EXPLOIT xp_enumdsn access rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS programsrating rate.php id XSS attempt rev 7 2024-03-06
suricata ET MOBILE_MALWARE iOS/Xsser Checkin rev 4 2024-03-06
suricata ET SCAN Tomcat upload from external source rev 9 2024-03-06
suricata ET MALWARE Infostealer.Bancos Sending Stolen info SMTP rev 3 2024-03-06
suricata ET MALWARE Mevade Checkin rev 5 2024-03-06
suricata ET MOBILE_MALWARE Android BatteryBotPro Checkin 2 rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Kalptaru Infotech Product Sale Framework customer.forumtopic.php forum_topic_id parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - net localgroup - PRIVMSG Command rev 5 2024-03-06
suricata ET INFO Possible Chrome Plugin install rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS All In One Control Panel poll_id parameter SQL Injection rev 8 2024-03-06
suricata ET ACTIVEX EasyMail Object IMAP4 Component Buffer Overflow Function call Attempt rev 3 2024-03-06
suricata ET MALWARE FinFisher Malware Connection Handshake rev 3 2024-03-06
suricata ET MALWARE Possible APT-12 Related C2 rev 4 2024-03-06
suricata ET MALWARE Win32.Vilsel Checkin rev 4 2024-03-06
suricata ET MALWARE Backdoor.Win32.Xtrat Checkin 2 rev 6 2024-03-06
suricata ET MALWARE Lethic Spambot CnC Initial Connect rev 4 2024-03-06
suricata ET INFO external cPanel login rev 4 2024-03-06
suricata ET MALWARE Cybergate/Rebhip/Spyrat Backdoor Keepalive rev 13 2024-03-06