Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Webshell_c99_4	—	—
yara	Webshell_acid_AntiSecShell_3	—	—
yara	Webshell_27_9_c66_c99	—	—
yara	ASPXspy2	—	—
yara	Pastebin_Webshell	—	—
yara	SoakSoak_Infected_Wordpress	—	—
yara	HawkEye_PHP_Panel	—	—
yara	Webshell_Insomnia	—	—
yara	AJAX_FileUpload_webshell	—	—
yara	JSP_jfigueiredo_APT_webshell_2	—	—
yara	JSP_jfigueiredo_APT_webshell	—	—
yara	JSP_Browser_APT_webshell	—	—
yara	Webshell_and_Exploit_CN_APT_HK	—	—
yara	FSO_s_ajan_2	—	—
yara	HDConfig	—	—
yara	r57shell_3	—	—
yara	HYTop2006_rar_Folder_2006	—	—
yara	BIN_Server	—	—
yara	phpshell_3	—	—
yara	SetupBDoor	—	—
yara	portlessinst	—	—
yara	ZXshell2_0_rar_Folder_nc	—	—
yara	cmdShell	—	—
yara	down_rar_Folder_down	—	—
yara	vanquish_2	—	—
yara	shelltools_g0t_root_xwhois	—	—
yara	pwreveal	—	—
yara	bin_wuaus	—	—
yara	u_uay	—	—
yara	byshell063_ntboot_2	—	—
yara	FSO_s_EFSO_2_2	—	—
yara	icyfox007v1_10_rar_Folder_asp	—	—
yara	by063cli	—	—
yara	_root_040_zip_Folder_deploy	—	—
yara	HYTop_DevPack_2005	—	—
yara	FSO_s_indexer_2	—	—
yara	httpdoor	—	—
yara	FSO_s_zehir4_2	—	—
yara	phpspy_2005_full	—	—
yara	c99shell	—	—