Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EquationGroup_Toolset_Apr17_svctouch	—	—
yara	EquationGroup_Toolset_Apr17_pwd_Implant	—	—
yara	EquationGroup_Toolset_Apr17_KisuComms_Target_2000	—	—
yara	AthenaHTTP_v2	—	—
yara	EquationGroup_Toolset_Apr17_SlDecoder	—	—
yara	EquationGroup_Toolset_Apr17_Windows_Implant	—	—
yara	EquationGroup_Toolset_Apr17_msgkd_msslu64_msgki_mssld	—	—
yara	EquationGroup_Toolset_Apr17_DoubleFeatureDll_dll_3	—	—
yara	EquationGroup_Toolset_Apr17_SetCallback	—	—
yara	EquationGroup_Toolset_Apr17__DoubleFeatureReader_DoubleFeatureReader_0	—	—
yara	Empire_Invoke_Portscan_Gen	—	—
yara	Empire_PowerShell_Framework_Gen4	—	—
yara	Empire_Invoke_CredentialInjection_Invoke_Mimikatz_Gen	—	—
yara	Empire_Invoke_Gen	—	—
yara	EnfalCode	—	—
yara	Empire_PowerShell_Framework_Gen5	—	—
yara	FUDCrypter	—	—
yara	EnfalStrings	—	—
yara	Enfal	—	—
yara	Enfal_Malware	—	—
yara	Enfal_Malware_Backdoor	—	—
yara	ce_enfal_cmstar_debug_msg	—	—
yara	Win7Elevatev2	—	—
yara	md5_87cf8209494eedd936b28ff620e28780	—	—
yara	UACME_Akagi	—	—
yara	UACElevator	—	—
yara	s4u	—	—
yara	EzcobStrings	—	—
yara	Ezcob	—	—
yara	ws_f0xy_downloader	—	—
yara	rc4_stack_key_fallchill	—	—
yara	Fareit_Trojan_Oct15	—	—
yara	FavoriteCode	—	—
yara	FavoriteStrings	—	—
yara	d4fe01ea13cf9926c2cf51d0ffbd78f9a110f4b9	—	—
yara	sig_7acb8d6d4c062c3097a7d31df103bc4d018519f9	—	—
yara	sig_5783b35b2eace55a5762df27fcb0b0fb28371b3e	—	—
yara	sig_2fb404bdcebc7acbeb598f8a2ddbecf48c60b113	—	—
yara	_84b76d765e7357fa5402b5af97d351424a8edf03_d0f90c1b3ebd79a816b5597a49ae8257df697591_da24c17f75cf0b7d6c5ab01832a827ee4b4c52eb_0	—	—
yara	_370c433dd61ec21d2677cfe02ef93a5f32a2b50d_5bf48d77bade79f2421ae3d258fe8262c043fb8f_08bdf374b28b234e824797145206f4df79eac6ea_1	—	—

← Prev Next →