Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 137 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 247 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 256 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 289 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 296 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 136 rev 112154 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 2 rev 1747 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 244 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 133 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 243 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 45 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 260 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 259 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 39 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 245 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 236 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 232 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 138 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 123 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 110 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 14 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 2 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 59 rev 4848 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 9 rev 1747 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 53 rev 4848 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 4 rev 1747 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 43 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 56 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 40 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 22 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 5 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 29 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 119 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 135 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 142 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 237 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 288 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 34 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 263 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 254 rev 112154 2026-10-02