Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 54 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 62 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 65 rev 4848 2026-10-02
suricata ET DROP Dshield Block Listed Source group 1 rev 7880 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 4 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 10 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 13 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 17 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 20 rev 1747 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 133 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 135 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 270 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 265 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 261 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 256 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 254 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 255 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 264 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 269 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 268 rev 112154 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 134 rev 6395 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 19 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 18 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 15 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 12 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 8 rev 1747 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 3 rev 1747 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 68 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 67 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 52 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 50 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 279 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 274 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 253 rev 112154 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 3 rev 6395 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 8 rev 7763 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 2 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 5 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 51 rev 112154 2026-10-02
suricata ET COMPROMISED Known Compromised or Hostile Host Traffic group 6 rev 7763 2026-10-02