Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 7 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 2 rev 1747 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 67 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 66 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 32 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 34 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 54 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 52 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 47 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 45 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 38 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 37 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 30 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 31 rev 112154 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 5 rev 7763 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 4 rev 7763 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 293 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 292 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 286 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 284 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 45 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 271 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 268 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 267 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 184 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 183 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 179 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 177 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 167 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 166 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 162 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 160 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 37 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 24 rev 112154 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 13 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 245 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 19 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 242 rev 112154 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 17 rev 1747 2026-10-02
suricata ET CNC Feodo Tracker Reported CnC Server group 2 rev 8063 2026-10-02