Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 143 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 141 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 56 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 66 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 59 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 34 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 11 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 35 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 53 rev 6395 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 66 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 67 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 68 rev 4848 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server UDP group 2 rev 8063 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 31 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 67 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 195 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 121 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 14 rev 7763 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 4 rev 4848 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 15 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 293 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 5 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 182 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 186 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 256 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 68 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 82 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 261 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 280 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 6 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 69 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 81 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 84 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 110 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 237 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 123 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 258 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 258 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 273 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 263 rev 112154 2026-10-02