Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EquationDrug_Keylogger	—	—
yara	EquationDrug_NetworkSniffer4	—	—
yara	EquationDrug_PlatformOrchestrator	—	—
yara	EquationDrug_NetworkSniffer5	—	—
yara	EquationDrug_FileSystem_Filter	—	—
yara	apt_equation_keyword	—	—
yara	FVEY_ShadowBrokers_Jan17_Screen_Strings	—	—
yara	FiveEyes_QUERTY_Malwareqwerty_20121	—	—
yara	FiveEyes_QUERTY_Malwaresig_20123_sys	—	—
yara	FiveEyes_QUERTY_Malwaresig_20123_cmdDef	—	—
yara	FiveEyes_QUERTY_Malwaresig_20121_dll	—	—
yara	FiveEyes_QUERTY_Malwareqwerty_20123	—	—
yara	FiveEyes_QUERTY_Malwaresig_20120_dll	—	—
yara	FiveEyes_QUERTY_Malwaresig_20120_cmdDef	—	—
yara	Network_Win7x86	—	—
yara	FiveEyes_QUERTY_Malwareqwerty_20120	—	—
yara	FiveEyes_QUERTY_Malwaresig_20121_cmdDef	—	—
yara	Control32	—	—
yara	Control64	—	—
yara	GH_PM32	—	—
yara	GH_PM64	—	—
yara	MemStub32_GH1	—	—
yara	MemStub32	—	—
yara	MemStub64_GH1	—	—
yara	MemStub64	—	—
yara	msvcrt_Win7AMD64	—	—
yara	Greenbug_Malware_1	—	—
yara	Greenbug_Malware_2	—	—
yara	Greenbug_Malware_3	—	—
yara	Greenbug_Malware_4	—	—
yara	Greenbug_Malware_5	—	—
yara	IMPLANT_1_v1	—	—
yara	IMPLANT_1_v2	—	—
yara	IMPLANT_1_v3	—	—
yara	IMPLANT_1_v4	—	—
yara	IMPLANT_1_v5	—	—
yara	IMPLANT_1_v7	—	—
yara	IMPLANT_2_v1	—	—
yara	IMPLANT_2_v2	—	—
yara	IMPLANT_2_v3	—	—