Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	CN_Tools_pc	—	—
yara	Dos_Down64	—	—
yara	epathobj_exp32	—	—
yara	Tools_unknown	—	—
yara	IISPutScanner	—	—
yara	IDTools_For_WinXP_IdtTool_2	—	—
yara	hkmjjiis6	—	—
yara	Dos_lcx	—	—
yara	x_way2_5_X_way	—	—
yara	sql1433_SQL	—	—
yara	HKTL_NET_GUID_OffensiveCSharp	—	—
yara	HKTL_NET_GUID_SHAPESHIFTER	—	—
yara	HKTL_NET_GUID_Evasor	—	—
yara	HKTL_NET_GUID_Stracciatella	—	—
yara	HKTL_NET_GUID_logger	—	—
yara	HKTL_NET_GUID_Internal_Monologue	—	—
yara	HKTL_NET_GUID_GRAT2	—	—
yara	HKTL_NET_GUID_PowerShdll	—	—
yara	HKTL_NET_GUID_CsharpAmsiBypass	—	—
yara	HKTL_NET_GUID_HastySeries	—	—
yara	HKTL_NET_GUID_DreamProtectorFree	—	—
yara	HKTL_NET_GUID_RedSharp	—	—
yara	HKTL_NET_GUID_ESC	—	—
yara	HKTL_NET_GUID_Csharp_Loader	—	—
yara	HKTL_NET_GUID_bantam	—	—
yara	HKTL_NET_GUID_SharpTask	—	—
yara	HKTL_NET_GUID_WindowsPlague	—	—
yara	HKTL_NET_GUID_Misc_CSharp	—	—
yara	HKTL_NET_GUID_SharpSpray	—	—
yara	HKTL_NET_GUID_Obfuscator	—	—
yara	HKTL_NET_GUID_SafetyKatz	—	—
yara	HKTL_NET_GUID_Dropless_Malware	—	—
yara	HKTL_NET_GUID_UAC_SilentClean	—	—
yara	HKTL_NET_GUID_DesktopGrabber	—	—
yara	HKTL_NET_GUID_wsManager	—	—
yara	HKTL_NET_GUID_UglyEXe	—	—
yara	HKTL_NET_GUID_SharpDump	—	—
yara	HKTL_NET_GUID_EducationalRAT	—	—
yara	HKTL_NET_GUID_Stealth_Kid_RAT	—	—
yara	HKTL_NET_GUID_SharpCradle	—	—