Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TOR Known Tor Exit Node TCP Traffic group 7 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 20 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 217 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 45 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 296 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 151 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 49 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 164 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 62 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 113 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 228 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 228 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 296 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 216 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 58 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 234 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 62 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 10 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 156 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 67 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 226 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 166 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 224 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 37 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 66 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 11 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 108 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 242 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 50 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 150 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 1 rev 7763 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 35 rev 6395 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 2 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 295 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 61 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 113 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 155 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 119 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 212 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 64 rev 6395 2026-10-02