Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	rknt_zip_Folder_RkNT	—	—
yara	FSO_s_c99	—	—
yara	FSO_s_RemExp_2	—	—
yara	Pack_InjectT	—	—
yara	PasswordReminder	—	—
yara	HYTop_DevPack_upload	—	—
yara	nstview_nstview	—	—
yara	FSO_s_ntdaddy	—	—
yara	BackDooR__fr_	—	—
yara	shelltools_g0t_root_Fport	—	—
yara	byloader	—	—
yara	FeliksPack3___PHP_Shells_2005	—	—
yara	FSO_s_tool	—	—
yara	RabbitStew64	—	—
yara	md5_f797dd5d8e13fe5c8898dbe3beb3cc5b	—	—
yara	md5_50be694a82a8653fa8b31d049aac721a	—	—
yara	onepage_or_checkout	—	—
yara	pos_jack	—	—
yara	cerber5b	—	—
yara	hidden_file_upload_in_503	—	—
yara	md5_fd141197c89d27b30821f3de8627ac38	—	—
yara	md5_ab63230ee24a988a4a9245c2456e4874	—	—
yara	md5_8e5f7f6523891a5dcefcbb1a79e5bbe9	—	—
yara	md5_4aa900ddd4f1848a15c61a9b7acd5035	—	—
yara	ShellCreator2	—	—
yara	visbot	—	—
yara	base64_hidden_in_image	—	—
yara	md5_39ca2651740c2cef91eb82161575348b	—	—
yara	md5_d30b23d1224438518d18e90c218d7c8b	—	—
yara	hide_data_in_jpeg	—	—
yara	md5_24f2df1b9d49cfb02d8954b08dba471f	—	—
yara	indoexploit_autoexploiter	—	—
yara	Surtr	—	—
yara	Trojan_Win32_Plakelog	—	—
yara	Trojan_Win32_Plainst	—	—
yara	Trojan_Win32_Plagicom	—	—
yara	Trojan_Win32_Plaklog	—	—
yara	Trojan_Win32_Plapiio	—	—
yara	Trojan_Win32_Plabit	—	—
yara	Trojan_Win32_Placisc2	—	—