Detection rules
Every rule tracked across all seven sources, newest updates first.
| Source | Rule | Status | Updated |
|---|---|---|---|
| yara | kagent | — | — |
| yara | csext | — | — |
| yara | antivirusdetector | — | — |
| yara | TinyZBot | — | — |
| yara | Backdoor_APT_Mongal | — | — |
| yara | IMPLANT_4_v9 | — | — |
| yara | IMPLANT_4_v8 | — | — |
| yara | IMPLANT_4_v7 | — | — |
| yara | IMPLANT_4_v5 | — | — |
| yara | IMPLANT_4_v4 | — | — |
| yara | MALW_trickbot_bankBot | — | — |
| yara | IMPLANT_4_v2 | — | — |
| yara | IMPLANT_4_v1 | — | — |
| yara | IMPLANT_3_v3 | — | — |
| yara | IMPLANT_3_v2 | — | — |
| yara | IMPLANT_3_v1 | — | — |
| yara | IMPLANT_2_v20 | — | — |
| yara | IMPLANT_4_v3_AlternativeRule | — | — |
| yara | IMPLANT_2_v19 | — | — |
| yara | IMPLANT_2_v18 | — | — |
| yara | IMPLANT_2_v17 | — | — |
| yara | IMPLANT_2_v16 | — | — |
| yara | IMPLANT_2_v15 | — | — |
| yara | IMPLANT_2_v14 | — | — |
| yara | IMPLANT_2_v13 | — | — |
| yara | IMPLANT_2_v12 | — | — |
| yara | IMPLANT_2_v11 | — | — |
| yara | IMPLANT_2_v10 | — | — |
| yara | IMPLANT_2_v9 | — | — |
| yara | IMPLANT_2_v8 | — | — |
| yara | IMPLANT_2_v7 | — | — |
| yara | IMPLANT_2_v6 | — | — |
| yara | IMPLANT_2_v5 | — | — |
| yara | IMPLANT_2_v4 | — | — |
| yara | IMPLANT_2_v3 | — | — |
| yara | IMPLANT_2_v2 | — | — |
| yara | IMPLANT_2_v1 | — | — |
| yara | IMPLANT_1_v7 | — | — |
| yara | IMPLANT_1_v5 | — | — |
| yara | IMPLANT_1_v4 | — | — |