Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 12 rev 7763 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server UDP group 5 rev 8063 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 77 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 130 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 7 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 1 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 8 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 104 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 135 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 218 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 85 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 84 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 81 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 298 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 75 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 133 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 229 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 297 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 135 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 10 rev 7763 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 82 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 6 rev 112154 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 1 rev 1747 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 89 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 69 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 139 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 98 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 130 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 137 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 231 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 128 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 71 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 69 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 85 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 294 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 103 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 2 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 116 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 102 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 138 rev 112154 2026-10-02