Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TOR Known Tor Exit Node TCP Traffic group 117 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 5 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 86 rev 6395 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 TCP group 3 rev 1747 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 22 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 88 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 84 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 53 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 17 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 224 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 5 rev 6395 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 51 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 46 rev 4848 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 18 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 17 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 16 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 297 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 21 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 51 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 265 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 258 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 249 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 39 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 249 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 232 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 69 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 214 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 203 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 197 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 33 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 185 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 181 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 16 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 61 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 164 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 163 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 160 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 66 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 147 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 137 rev 112154 2026-10-02