Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Nanocore_RAT_Gen_2	—	—
yara	Nanocore_RAT_Gen_1	—	—
yara	Ap0calypse	—	—
yara	Meterpreter_Reverse_Tcp	—	—
yara	apt_win32_dll_rat_1a53b0cp32e46g0qio7	—	—
yara	BergSilva_Malware	—	—
yara	Indetectables_RAT	—	—
yara	apt_win32_dll_rat_hiZor_RAT	—	—
yara	SANS_ICS_Cybersecurity_Challenge_400_Havex_Memdump	—	—
yara	Havex_Trojan_PHP_Server	—	—
yara	Win32FertgerHavex	—	—
yara	Win32OPCHavex	—	—
yara	glassrat	—	—
yara	MW_gholee_v2	—	—
yara	MW_gholee_v1	—	—
yara	DropBear_SSH_Server	—	—
yara	gholeeV2	—	—
yara	gholeeV1	—	—
yara	gh0st	—	—
yara	Gh0st	—	—
yara	APT_WIN_Gh0st_ver	—	—
yara	CSIT_14003_03	—	—
yara	FlyingKitten	—	—
yara	DarkComet_5	—	—
yara	DarkComet_1	—	—
yara	CyberGate	—	—
yara	CrossRAT	—	—
yara	Crimson	—	—
yara	Cerberus	—	—
yara	Bozok	—	—
yara	Bolonyokte	—	—
yara	apt_c16_win_memory_pcclient	—	—
yara	DestructiveHardDriveTool1	—	—
yara	PapaAlfa	—	—
yara	LimaDelta	—	—
yara	LimaCharlie	—	—
yara	LimaBravo	—	—
yara	LimaAlfa	—	—
yara	KiloAlfa	—	—
yara	IndiaWhiskey	—	—