Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 294 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 295 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 50 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 118 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 15 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 52 rev 112154 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 5 rev 7763 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 23 rev 6395 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 8 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 5 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 238 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 2 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 11 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 3 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 63 rev 6395 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic UDP group 7 rev 7763 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 16 rev 6395 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 12 rev 7763 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 8 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 19 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 272 rev 112154 2026-10-02
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 20 rev 1747 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 179 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 110 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 52 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 64 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 51 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 40 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 53 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 293 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 243 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 27 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 240 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 39 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 13 rev 6395 2026-10-02
snort ET COMPROMISED Known Compromised or Hostile Host Traffic TCP group 13 rev 7763 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 175 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 173 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 170 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 17 rev 6395 2026-10-02