Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 16 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 19 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 23 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 26 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 33 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 36 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 40 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 43 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 47 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 50 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 54 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 57 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 63 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 66 rev 4848 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 2 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 5 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 10 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 13 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 17 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 20 rev 1747 2026-10-02
suricata ET CNC Feodo Tracker Reported CnC Server group 3 rev 8063 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 44 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 36 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 31 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 296 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 17 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 10 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 4 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 7 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 8 rev 112154 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 51 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 18 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 295 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 32 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 38 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 39 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 3 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 5 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 9 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 12 rev 112154 2026-10-02