Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TOR Known Tor Exit Node TCP Traffic group 104 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 99 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 83 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 70 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 52 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 53 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 39 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 35 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 11 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 58 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 66 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 8 rev 6395 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 49 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 38 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 22 rev 4848 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server UDP group 1 rev 8063 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 18 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 16 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 70 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 81 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 5 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 298 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 293 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 283 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 284 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 284 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 274 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 271 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 255 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 47 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 262 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 254 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 244 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 238 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 205 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 228 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 218 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 213 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 59 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 194 rev 112154 2026-10-02