Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Malwareusedbycyberthreatactor3	—	—
yara	wiper_unique_strings	—	—
yara	wiper_encoded_strings	—	—
yara	createP2P	—	—
yara	firewallOpener	—	—
yara	Caracachs	—	—
yara	StringDotSimplified	—	—
yara	searchinject	—	—
yara	FakeTLS_ServerHelloGetSelectedCipher	—	—
yara	XORDecodeA7	—	—
yara	DynamicAPILoading	—	—
yara	DNSCalcStyleEncodeAndDecode	—	—
yara	GenerateTLSClientHelloPacket_Test	—	—
yara	RC4SboxKeyGen	—	—
yara	RandomTimestampGenerator	—	—
yara	Wanna_Sample_4da1f312a214c07143abeeafb695d904	—	—
yara	NHS_Strain_Wanna	—	—
yara	ransom_telefonica	—	—
yara	Wanna_Cry_Ransomware_Generic	—	—
yara	WannaCry_Ransomware	—	—
yara	DarkComet_Keylogger_File	—	—
yara	WannaCry_Ransomware_Gen	—	—
yara	WannCry_m_vbs	—	—
yara	WannCry_BAT	—	—
yara	WannaCry_RansomNote	—	—
yara	lazaruswannacry	—	—
yara	WannaCry_Ransomware_Dropper	—	—
yara	DarkComet_4	—	—
yara	WannaCry_SMB_Exploit	—	—
yara	wannacry_static_ransom	—	—
yara	wannacry_memory_ransom	—	—
yara	worm_ms17_010	—	—
yara	Maze	—	—
yara	SnakeRansomware	—	—
yara	ransomware_PetrWrap	—	—
yara	Petya_Ransomware	—	—
yara	Ransom_Petya	—	—
yara	FE_CPE_MS17_010_RANSOMWARE	—	—
yara	petya_eternalblue	—	—
yara	pico_ransomware	—	—