Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	remsec_executable_blob_64	—	—
yara	md5_fb9e35bf367a106d18eb6aa0fe406437	—	—
yara	md5_39ca2651740c2cef91eb82161575348b	—	—
yara	md5_4aa900ddd4f1848a15c61a9b7acd5035	—	—
yara	cerber5b	—	—
yara	RabbitStew64	—	—
yara	WebShell_b374k_mini_shell_php_php	—	—
yara	webshell_jsp_asd	—	—
yara	multiple_webshells_0026	—	—
yara	webshell_caidao_shell_hkmjj	—	—
yara	multiple_webshells_0027	—	—
yara	multiple_webshells_0028	—	—
yara	webshell_PHP_bug_1_	—	—
yara	multiple_webshells_0029	—	—
yara	multiple_php_webshells_2	—	—
yara	webshell_ELMALISEKER_Backd00r	—	—
yara	WebShell_Uploader	—	—
yara	webshell_minupload	—	—
yara	webshell_jsp_jdbc	—	—
yara	webshell_php_moon	—	—
yara	multiple_webshells_0030	—	—
yara	multiple_webshells_0031	—	—
yara	webshell_c99_madnet_smowu	—	—
yara	webshell_asp_Rader	—	—
yara	webshell_Inderxer	—	—
yara	webshell_jsp_action	—	—
yara	webshell_spjspshell	—	—
yara	webshell_asp_cmdasp	—	—
yara	multiple_webshells_0032	—	—
yara	webshell_php_2	—	—
yara	webshell_asp_dabao	—	—
yara	webshell_php_backdoor	—	—
yara	webshell_PHP_b37	—	—
yara	DarkSecurityTeam_Webshell	—	—
yara	PHP_Cloaked_Webshell_SuperFetchExec	—	—
yara	WebShell_RemExp_asp_php	—	—
yara	webshell_PHP_c37	—	—
yara	WebShell_dC3_Security_Crew_Shell_PRiV	—	—
yara	webshell_jsp_cmdjsp_2	—	—
yara	webshell_PHP_co	—	—