Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 65 rev 4848 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 4 rev 1747 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 40 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 46 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 57 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 64 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 72 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 79 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 91 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 98 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 101 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 95 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 86 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 76 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 69 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 62 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 50 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 43 rev 6395 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 9 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 2 rev 1747 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 62 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 53 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 46 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 42 rev 4848 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 5 rev 7763 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 294 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 285 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 278 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 270 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 224 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 217 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 214 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 204 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 197 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 190 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 146 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 135 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 131 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 121 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 115 rev 112154 2026-10-02