Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	OPCLEAVER_NetC	—	—
yara	OPCLEAVER_LoggerModule	—	—
yara	OPCLEAVER_Jasus	—	—
yara	obf_base64_decode	—	—
yara	OPCLEAVER_BackDoorLogger	—	—
yara	zhmimikatz	—	—
yara	zhLookUp	—	—
yara	zhCat	—	—
yara	wndTest	—	—
yara	pvz_out	—	—
yara	pvz_in	—	—
yara	mimikatzWrapper	—	—
yara	kagent	—	—
yara	csext	—	—
yara	antivirusdetector	—	—
yara	TinyZBot	—	—
yara	Jasus	—	—
yara	APT_Hikit_msrv	—	—
yara	BackDoorLogger	—	—
yara	LONGRUN_APT1	—	—
yara	ZhoupinExploitCrew	—	—
yara	APT_NGO_wuaclt_PDF	—	—
yara	APT_NGO_wuaclt	—	—
yara	apt_RU_MoonlightMaze_wipe	—	—
yara	apt_RU_MoonlightMaze_u_logcleaner	—	—
yara	fopo_obfuscator	—	—
yara	apt_RU_MoonlightMaze_IRIX_exploit_GEN	—	—
yara	LoggerModule	—	—
yara	php_obf_malfunctions	—	—
yara	apt_RU_MoonlightMaze_xk_keylogger	—	—
yara	apt_RU_MoonlightMaze_cle_tool	—	—
yara	apt_RU_MoonlightMaze_de_tool	—	—
yara	loki2crypto	—	—
yara	apt_RU_MoonlightMaze_customsniffer	—	—
yara	thetech_org_js	—	—
yara	apt_RU_MoonlightMaze_customlokitools	—	—
yara	mag_php_js	—	—
yara	Molerats_certs	—	—
yara	Mirage_APT	—	—
yara	Mirage	—	—