Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 40 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 3 rev 6395 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 TCP group 2 rev 1747 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 5 rev 1747 2026-10-02
snort ET DROP Dshield Block Listed Source group 1 rev 7880 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 265 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 266 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 67 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 169 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 1 rev 6395 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 48 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 63 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 56 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 61 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 66 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 66 rev 112154 2026-10-02
snort ET DROP Dshield Block Listed Source group 1 rev 7880 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 172 rev 112154 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 2 rev 1747 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 64 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 2 rev 6395 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 TCP group 6 rev 1747 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 57 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 55 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 66 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 58 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 52 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 49 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 53 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 59 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 45 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 42 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 122 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 46 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 199 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 39 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 173 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 36 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 60 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 47 rev 4848 2026-10-02