Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	thetech_org_js	—	—
yara	IMPLANT_4_v1	—	—
yara	IMPLANT_4_v2	—	—
yara	MALW_trickbot_bankBot	—	—
yara	IMPLANT_4_v4	—	—
yara	IMPLANT_4_v5	—	—
yara	mag_php_js	—	—
yara	amasty_biz_js	—	—
yara	APT1_WEBC2_DIV	—	—
yara	IMPLANT_4_v7	—	—
yara	IMPLANT_4_v8	—	—
yara	IMPLANT_4_v9	—	—
yara	Backdoor_APT_Mongal	—	—
yara	WildNeutron_Sample_8	—	—
yara	WildNeutron_Sample_9	—	—
yara	WildNeutron_Sample_10	—	—
yara	amasty_biz	—	—
yara	html_upload	—	—
yara	sinlesspleasure_com	—	—
yara	WildNeutron_javacpl	—	—
yara	CALENDAR_APT1	—	—
yara	onimiki	—	—
yara	Winnti_signing_cert	—	—
yara	Winnti_malware_Nsiproxy	—	—
yara	Winnti_malware_UpdateDLL	—	—
yara	Winnti_malware_FWPK	—	—
yara	Winnti_malware_StreamPortal_Gen	—	—
yara	WoolenGoldfish_Generic_1	—	—
yara	WoolenGoldfish_Generic_2	—	—
yara	WoolenGoldfish_Generic_3	—	—
yara	EquationGroup_emptycriss	—	—
yara	EquationGroup_scripme	—	—
yara	BangatStrings	—	—
yara	EquationGroup_cryptTool	—	—
yara	EquationGroup_dumppoppy	—	—
yara	EquationGroup_Auditcleaner	—	—
yara	APT1_LIGHTBOLT	—	—
yara	APT1_MAPIGET	—	—
yara	DownloaderPossibleCCrew	—	—
yara	EquationGroup_reverse_shell	—	—