Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 155 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 148 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 163 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 159 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 161 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 89 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 131 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 125 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 91 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 94 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 151 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 127 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 73 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 124 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 160 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 123 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 134 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 158 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 102 rev 112154 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 1 rev 1747 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 30 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 29 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 105 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 133 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 23 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 126 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 96 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 95 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 88 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 103 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 24 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 122 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 91 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 101 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 226 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 121 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 96 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 90 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 26 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 92 rev 112154 2026-10-02