Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	xRAT	—	—
yara	xRAT20	—	—
yara	mswin_check_lm_group	—	—
yara	WAF_Bypass	—	—
yara	Guilin_veterans_cookie_spoofing_tool	—	—
yara	MarathonTool	—	—
yara	PLUGIN_TracKid	—	—
yara	Pc_pc2015	—	—
yara	sekurlsa	—	—
yara	mysqlfast	—	—
yara	DTools2_02_DTools	—	—
yara	dll_PacketX	—	—
yara	SqlDbx_zhs	—	—
yara	ms10048_x86	—	—
yara	Dos_ch	—	—
yara	DUBrute_DUBrute	—	—
yara	CookieTools	—	—
yara	update_PcInit	—	—
yara	dat_NaslLib	—	—
yara	Dos_1	—	—
yara	OtherTools_servu	—	—
yara	ustrrefadd	—	—
yara	webshell_jsp_guige	—	—
yara	HKTL_NET_GUID_OffensiveCSharp	—	—
yara	HKTL_NET_GUID_SHAPESHIFTER	—	—
yara	HKTL_NET_GUID_Evasor	—	—
yara	HKTL_NET_GUID_Stracciatella	—	—
yara	HKTL_NET_GUID_logger	—	—
yara	HKTL_NET_GUID_Internal_Monologue	—	—
yara	HKTL_NET_GUID_GRAT2	—	—
yara	HKTL_NET_GUID_PowerShdll	—	—
yara	HKTL_NET_GUID_CsharpAmsiBypass	—	—
yara	HKTL_NET_GUID_HastySeries	—	—
yara	HKTL_NET_GUID_DreamProtectorFree	—	—
yara	HKTL_NET_GUID_RedSharp	—	—
yara	HKTL_NET_GUID_ESC	—	—
yara	HKTL_NET_GUID_Csharp_Loader	—	—
yara	HKTL_NET_GUID_bantam	—	—
yara	HKTL_NET_GUID_SharpTask	—	—
yara	HKTL_NET_GUID_WindowsPlague	—	—