Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 15 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 132 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 131 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 170 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 257 rev 112154 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 1 rev 1747 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 189 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 8 rev 4848 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server TCP group 2 rev 8063 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 115 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 79 rev 6395 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 30 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 272 rev 112154 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server TCP group 1 rev 8063 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 53 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 98 rev 6395 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 16 rev 7763 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 19 rev 1747 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 10 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 80 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 88 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 265 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 262 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 20 rev 7763 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 107 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 114 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 257 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 255 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 114 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 108 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 109 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 110 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 122 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 111 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 114 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 109 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 254 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 174 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 254 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 273 rev 112154 2026-10-02