Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 33 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 4 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 56 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 38 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 38 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 21 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 46 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 48 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 59 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 53 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 72 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 82 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 106 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 106 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 121 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 122 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 19 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 221 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 14 rev 7763 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 77 rev 6395 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 10 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 278 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 74 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 194 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 231 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 278 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 13 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 10 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 12 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 21 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 262 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 238 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 129 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 131 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 127 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 102 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 22 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 13 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 128 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 263 rev 112154 2026-10-02