Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 6 rev 7763 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 7 rev 7763 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 10 rev 7763 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 11 rev 7763 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 13 rev 7763 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 14 rev 7763 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 19 rev 7763 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 26 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 1 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 2 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 5 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 6 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 8 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 9 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 13 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 14 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 16 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 17 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 20 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 21 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 23 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 24 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 30 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 31 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 33 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 34 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 37 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 38 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 40 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 41 rev 4848 2026-10-02
suricata ET CNC Feodo Tracker Reported CnC Server group 1 rev 8063 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 45 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 47 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 48 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 65 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 66 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 68 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 69 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 74 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 27 rev 112154 2026-10-02