Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 3 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 98 rev 6395 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server UDP group 1 rev 8063 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 123 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 193 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 95 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 88 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 39 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 117 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 271 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 105 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 96 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 254 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 120 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 188 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 128 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 50 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 255 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 5 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 115 rev 112154 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server TCP group 2 rev 8063 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 18 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 189 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 46 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 121 rev 112154 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 1 rev 1747 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 261 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 197 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 259 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 85 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 122 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 134 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 211 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 11 rev 4848 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 TCP group 1 rev 1747 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 24 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 82 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 200 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 268 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 37 rev 112154 2026-10-02