Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Secure-Soft.Stealer Checkin rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Dog Pedigree Online Database managePerson.php personId Parameter SQL Injection rev 8 2024-03-06
suricata ET INFO HTTP Request to a *.sg.tf domain rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Bugzilla token.cgi HPP e-mail validation bypass Attempt URI rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS WSN Guest search.php search parameter SQL Injection rev 7 2024-03-06
suricata ET INFO HTTP Request to a *.ca.tf domain rev 6 2024-03-06
suricata ET INFO External Unencrypted Connection to BASE Console rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter projects.php idp Parameter SQL Injection rev 8 2024-03-06
suricata ET MALWARE Win32/Enchanim Process List Dump rev 4 2024-03-06
suricata ET SCAN FHScan core User-Agent Detect rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS ClipShare Pro channel_detail.php chid Parameter SQL Injection rev 8 2024-03-06
suricata ET SCAN SQLNinja Attempt To Create xp_cmdshell Session rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS 212cafe Board view.php qID Parameter SQL Injection rev 11 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 2 rev 3 2024-03-06
suricata ET INFO HTTP Request to a .noip.cn domain rev 6 2024-03-06
suricata ET EXPLOIT Pwdump6 Session Established test file created on victim rev 4 2024-03-06
suricata ET MOBILE_MALWARE iOS/Xsser sending GPS info rev 4 2024-03-06
suricata ET EXPLOIT TP-LINK Known Malicious Router DNS Change GET Request rev 5 2024-03-06
suricata ET SCAN Grim's Ping ftp scanning tool rev 5 2024-03-06
suricata ET WEB_SERVER Insomnia Shell HTTP Request rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS TorrentTrader Classic delreq.php categ Parameter Sql Injection rev 8 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - PRIVMSG Response - Directory Listing rev 4 2024-03-06
suricata ET INFO TLS possible TOR SSL traffic rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Venalsur Booking Centre HotelID Parameter SQL Injection rev 7 2024-03-06
suricata ET INFO Unsupported/Fake Internet Explorer Version MSIE 3. rev 6 2024-03-06
suricata ET MALWARE Win32/Nitol.A Checkin rev 8 2024-03-06
suricata ET MALWARE Linux/dtool IRC Command Complete 1 rev 5 2024-03-06
suricata ET MALWARE Win32/Cutwail.BE Checkin 1 rev 4 2024-03-06
suricata ET WEB_SERVER Possible WebLogic Admin Login With Default Creds rev 5 2024-03-06
suricata ET CHAT Skype User-Agent detected rev 13 2024-03-06
suricata ET HUNTING SUSPICIOUS *.doc.exe in HTTP URL rev 4 2024-03-06
suricata ET INFO Splashtop Remote Control Session Keepalive Response rev 3 2024-03-06
suricata ET MALWARE SEASALT Server Response rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Frontis aps_browse_sources.php source_class Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT TP-LINK TL-WR841N Router DNS Change GET Request rev 5 2024-03-06
suricata ET MALWARE Infostealer.Bancos Checkin via SMTP rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Easyedit CMS subcategory.php intSubCategoryID parameter sql injection rev 8 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass switch_boot.cgi rev 5 2024-03-06
suricata ET WEB_SERVER Cisco IOS HTTP Server Exec Command Execution Attempt rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS ECShop user.php order_sn Parameter SQL Injection rev 7 2024-03-06