Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 91 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 41 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 163 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 38 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 235 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 295 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 26 rev 6395 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server UDP group 4 rev 8063 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 34 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 26 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 151 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 99 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 87 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 246 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 97 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 37 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 293 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 41 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 156 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 238 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 148 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 152 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 199 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 45 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 35 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 295 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 12 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 157 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 107 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 71 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 148 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 162 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 72 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 65 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 66 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 68 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 62 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 59 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 67 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 64 rev 6395 2026-10-02