Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
elastic Base64 Decoded Payload Piped to Interpreter production 2026-10-02
splunk Child Processes of Spoolsv exe deprecated 2026-10-02
sigma Renamed Schtasks Execution experimental 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 133 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 45 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 132 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 39 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 30 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 35 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 38 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 42 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 44 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 128 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 131 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 13 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 7 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 19 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 29 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 33 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 34 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 36 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 37 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 3 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 41 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 2 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 43 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 46 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 47 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 129 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 130 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 4 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 11 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 27 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 12 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 15 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 16 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 23 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 28 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 32 rev 112132 2026-10-01
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 1 rev 112132 2026-10-01