Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Exploit_MS15_077_078_HackingTeam	—	—
yara	Mal_Dropper_httpEXE_from_CAB	—	—
yara	Mal_http_EXE	—	—
yara	Mal_PotPlayer_DLL	—	—
yara	Flash_CVE_2015_5119_APT3	—	—
yara	Linux_DirtyCow_Exploit	—	—
yara	potential_CVE_2017_11882	—	—
yara	rtf_cve2017_11882_ole	—	—
yara	rtf_cve2017_11882	—	—
yara	CVE_2018_20250	—	—
yara	aspx_shell	—	—
yara	crime_ole_loadswf_cve_2018_4878	—	—
yara	asp_file	—	—
yara	php_killnc	—	—
yara	asp_shell	—	—
yara	settings	—	—
yara	asp_proxy	—	—
yara	php_shell	—	—
yara	php_reverse_shell	—	—
yara	php_dns	—	—
yara	WEB_INF_web	—	—
yara	jsp_cmd	—	—
yara	laudanum	—	—
yara	php_file	—	—
yara	webshell_PHP_redcod	—	—
yara	warfiles_cmd	—	—
yara	asp_dns	—	—
yara	php_reverse_shell_2	—	—
yara	Laudanum_Tools_Generic	—	—
yara	Backdoor_WebShell_asp	—	—
yara	webshell_ChinaChopper_aspx	—	—
yara	webshell_ChinaChopper_php	—	—
yara	Dotico_PHP_webshell	—	—
yara	php_anuna	—	—
yara	php_in_image	—	—
yara	SynFlooder	—	—
yara	Mirai_4	—	—
yara	KURTON_APT1	—	—
yara	RooterCode	—	—
yara	TrojanCookies_CCREW	—	—