Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	diamond_fox	—	—
yara	DirtJumper_drive	—	—
yara	DirtJumper_drive2	—	—
yara	DirtJumper_drive3	—	—
yara	eicar	—	—
yara	Trj_Elex_Installer_NSIS	—	—
yara	Trj_Elex_Installer	—	—
yara	md5_825a3b2a6abbe6abcdeda64a73416b3d	—	—
yara	Trj_Elex_Service32	—	—
yara	Trj_Elex_Service64	—	—
yara	Trj_Elex_Dll32	—	—
yara	Trj_Elex_Dll64	—	—
yara	elknot_xor	—	—
yara	Emotets	—	—
yara	Empire_Invoke_MetasploitPayload	—	—
yara	Empire_Exploit_Jenkins	—	—
yara	Empire_Get_SecurityPackages	—	—
yara	Empire_Invoke_PowerDump	—	—
yara	Empire_Install_SSP	—	—
yara	Empire_Invoke_ShellcodeMSIL	—	—
yara	Empire__Users_neo_code_Workspace_Empire_4sigs_PowerUp	—	—
yara	Empire_Invoke_Mimikatz_Gen	—	—
yara	Empire_Get_GPPPassword	—	—
yara	GlassesStrings	—	—
yara	Glasses	—	—
yara	GoziRule	—	—
yara	Grozlex	—	—
yara	Hajime_generic_ARCH	—	—
yara	Hajime_MIPS	—	—
yara	Hajime_ARM5	—	—
yara	Hajime_SH4	—	—
yara	Hajime_DOWNLOADER	—	—
yara	Hsdfihdf	—	—
yara	Linux_Httpsd_malware_ARM	—	—
yara	Linux_Httpsd_malware_i686	—	—
yara	IMulerCode	—	—
yara	IMulerStrings	—	—
yara	IMuler	—	—
yara	md5_9b59cb5b557e46e1487ef891cedaccf7	—	—
yara	IceID_Bank_trojan	—	—