Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
297 detections
Filters
Last updated
All Time
Detection languages
118
41
34
33
20
Contributors
106
38
28
23
20
Categories
167
159
112
48
39
Platforms
231
190
104
9
9
Products / Services
10,680
9,761
6,694
4,418
3,744
297
MITRE Techniques
174
114
60
52
43
CVEs
6
6
3
2
2
IDS Classtypes
4
IDS Protocols
4
Detects the execution of Python code that imports the 'pty' and 'socket' modules and uses 'spawn' and '.connect' functions, which is a common pattern for establishing a reverse shell.
This rule detects common SQL exception types in Python applications as defined by PEP 249. These exceptions (DataError, IntegrityError, ProgrammingError, OperationalError) indicate issues during database operations, which could range from malformed queries to database connectivity problems or constraint violations. While often benign, repeated or unusual occurrences of these errors could signal application vulnerabilities being exploited (e.g., SQL injection attempts leading to syntax errors) or other malicious database interactions.
Generic rule for SQL exceptions in Python according to PEP 249
Page 15 of 15