Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 176 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 88 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 19 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 108 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 97 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 25 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 27 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 107 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 225 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 178 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 106 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 28 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 4 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 104 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 27 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 16 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 223 rev 112154 2026-10-02
snort ET CNC Feodo Tracker Reported CnC Server UDP group 4 rev 8063 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 18 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 251 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 15 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 99 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 15 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 115 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 220 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 106 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 91 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 91 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 171 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 94 rev 6395 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 17 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 252 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 173 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 122 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 17 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 169 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 121 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 237 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 1 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 82 rev 6395 2026-10-02