Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	dragos_crashoverride_name_search	—	—
yara	dragos_crashoverride_hashes	—	—
yara	dragos_crashoverride_weirdMutex	—	—
yara	dragos_crashoverride_serviceStomper	—	—
yara	dragos_crashoverride_wiperModuleRegistry	—	—
yara	dragos_crashoverride_wiperFileManipulation	—	—
yara	ROKRAT_loader	—	—
yara	ROKRAT_payload	—	—
yara	Anthem_DeepPanda_sl_txt_packed	—	—
yara	Anthem_DeepPanda_lot1	—	—
yara	Anthem_DeepPanda_htran_exe	—	—
yara	Anthem_DeepPanda_Trojan_Kakfum	—	—
yara	APT_DeputyDog_Fexel	—	—
yara	APT_DeputyDog	—	—
yara	apt_nix_elf_derusbi	—	—
yara	apt_nix_elf_derusbi_kernelModule	—	—
yara	apt_nix_elf_Derusbi_Linux_SharedMemCreation	—	—
yara	apt_nix_elf_Derusbi_Linux_Strings	—	—
yara	apt_win_exe_trojan_derusbi	—	—
yara	Trojan_Derusbi	—	—
yara	APT_Derusbi_DeepPanda	—	—
yara	APT_Derusbi_Gen	—	—
yara	derusbi_kernel	—	—
yara	derusbi_linux	—	—
yara	Derusbi_Kernel_Driver_WD_UDFS	—	—
yara	Derusbi_Code_Signing_Cert	—	—
yara	XOR_4byte_Key	—	—
yara	apt_win32_dll_bergard_pgv_pvid_variant	—	—
yara	EQGRP_extrabacon	—	—
yara	EQGRP_sploit_py	—	—
yara	EQGRP_uninstallPBD	—	—
yara	EQGRP_BICECREAM	—	—
yara	EQGRP_create_http_injection	—	—
yara	EQGRP_BFLEA_2201	—	—
yara	msvcrt_Win7x86	—	—
yara	EQGRP_BpfCreator_RHEL4	—	—
yara	EQGRP_StoreFc	—	—
yara	EQGRP_hexdump	—	—
yara	EQGRP_BBALL	—	—
yara	EQGRP_BARPUNCH_BPICKER	—	—