Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 160 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 171 rev 112154 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 26 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 23 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 164 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 158 rev 112154 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 15 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 155 rev 112154 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 11 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 9 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 157 rev 112154 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 21 rev 1747 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 64 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 232 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 52 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 65 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 132 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 149 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 144 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 51 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 77 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 68 rev 6395 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 41 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 135 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 8 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 146 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 113 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 143 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 255 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 50 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 43 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 76 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 102 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 69 rev 6395 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 4 rev 1747 2026-10-02
suricata ET CNC Feodo Tracker Reported CnC Server group 1 rev 8063 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 247 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 136 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 24 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 4 rev 112154 2026-10-02