> ## Documentation Index
> Fetch the complete documentation index at: https://asymptotelabs-fix-postinstall-refresh-user-hooks.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# beacon rules list

> List active Beacon threat-detection rules

## Command Overview

`beacon rules list` prints the active threat-detection rules used by [`beacon scan`](/cli/scan).

```bash title="Command syntax" theme={null}
beacon rules list [flags]
```

The output includes each rule id, severity, maturity status, and source. The source shows whether Beacon loaded the rule from the local store or the built-in baseline.

## Examples

List active user-mode rules:

```bash title="List active rules" theme={null}
beacon rules list
```

List active system-mode rules:

```bash title="List system-mode rules" theme={null}
sudo beacon rules list --system
```

## Flags

| Flag       | Description                                     |
| ---------- | ----------------------------------------------- |
| `--user`   | Use per-user endpoint paths. Enabled by default |
| `--system` | Use system endpoint paths                       |

## Related

<Columns cols={2}>
  <Card title="beacon rules add" icon="plus" href="/cli/rules-add">
    Install local rule files into the store.
  </Card>

  <Card title="beacon scan" icon="magnifying-glass" href="/cli/scan">
    Run active rules over local telemetry.
  </Card>
</Columns>