Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET Threatview.io High Confidence Cobalt Strike C2 UDP group 22 rev 1747 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 41 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 49 rev 6395 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 30 rev 4848 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 57 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 117 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 39 rev 112154 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 32 rev 4848 2026-10-02
snort ET DROP Spamhaus DROP Listed Traffic Inbound group 33 rev 4848 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 106 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 284 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 233 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 36 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 93 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 240 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 68 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 104 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 41 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 104 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 240 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 113 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 68 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 238 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 78 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 111 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 177 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 163 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 282 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 274 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 106 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP TCP group 73 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 273 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 95 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 108 rev 6395 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 269 rev 112154 2026-10-02
snort ET CINS Active Threat Intelligence Poor Reputation IP UDP group 39 rev 112154 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 84 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 77 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 85 rev 6395 2026-10-02
snort ET TOR Known Tor Exit Node TCP Traffic group 69 rev 6395 2026-10-02