Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
elastic Base64 Decoded Payload Piped to Interpreter production 2026-10-02
splunk Child Processes of Spoolsv exe deprecated 2026-10-02
sigma Renamed Schtasks Execution experimental 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 105 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 97 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 104 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 89 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 39 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 45 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 88 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 93 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 96 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 100 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 103 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 31 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 25 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 35 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 38 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 43 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 44 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 46 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 47 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 91 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 92 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 94 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 95 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 98 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 99 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 101 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 102 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 23 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 28 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 29 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 30 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 33 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 34 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 36 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 37 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 41 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 42 rev 112132 2026-10-01