Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 20 rev 7763 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 118 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 81 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 186 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 72 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 79 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 71 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 22 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 80 rev 112154 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server TCP group 2 rev 8063 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 264 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 26 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 233 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 86 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 14 rev 7763 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 8 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 270 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 133 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 99 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 266 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 92 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 138 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 18 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 147 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 78 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 97 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 168 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 25 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 96 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 22 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 141 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 19 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 272 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 128 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 145 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 82 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 123 rev 6395 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 16 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 144 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 113 rev 6395 2026-10-02