Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 118 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 176 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 265 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 28 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 121 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 22 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 21 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 255 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 26 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 107 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 19 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 30 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 59 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 16 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 2 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 15 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 20 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 269 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 168 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 57 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 14 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 185 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 13 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 120 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 15 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 264 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 254 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 270 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 271 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 180 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 135 rev 6395 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 9 rev 1747 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 181 rev 112154 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 2 rev 1747 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 29 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 258 rev 112154 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server TCP group 2 rev 8063 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 24 rev 4848 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 16 rev 7763 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 27 rev 4848 2026-10-02