Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET TOR Known Tor Exit Node Traffic group 7 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 72 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 123 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 70 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 63 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 6 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 60 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 66 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 68 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 76 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 65 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 107 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 109 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 31 rev 6395 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 21 rev 1747 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 69 rev 6395 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 22 rev 1747 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 62 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 126 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 124 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 33 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 34 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 59 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 35 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 27 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 78 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 77 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 112 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 1 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 85 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 44 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 187 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 233 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 231 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 206 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 98 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 98 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 37 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 97 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 97 rev 112154 2026-10-02