Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 62 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 129 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 22 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 129 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 19 rev 112154 2026-10-02
snort ET DROP Dshield Block Listed Source group 1 rev 7880 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 57 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 132 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 144 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 18 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 63 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 4 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 6 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 17 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 15 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 137 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 11 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 10 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 220 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 131 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 26 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 130 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 124 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 126 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 284 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 228 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 134 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 20 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 65 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 22 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 134 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 27 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 29 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 30 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 133 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 33 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 35 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 36 rev 6395 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 58 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 61 rev 4848 2026-10-02