Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 36 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 68 rev 4848 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 7 rev 1747 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 64 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 85 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 196 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 195 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 213 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 228 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 61 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 60 rev 4848 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 3 rev 1747 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 104 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 111 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 118 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 210 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 199 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 200 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 108 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 38 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 95 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 87 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 79 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 50 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 198 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 56 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 127 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 126 rev 6395 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 35 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 124 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 136 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 217 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 221 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 34 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 113 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 105 rev 6395 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 5 rev 1747 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 66 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 55 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 37 rev 4848 2026-10-02