Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	RUAG_Bot_Config_File	—	—
yara	Sofacy_Bundestag_Winexe	—	—
yara	Sofacy_Bundestag_Mal2	—	—
yara	Sofacy_Bundestag_Mal3	—	—
yara	Sofacy_Bundestag_Batch	—	—
yara	Sofacy_Fybis_ELF_Backdoor_Gen1	—	—
yara	Sphinx_Moth_iastor32	—	—
yara	Sofacy_Fysbis_ELF_Backdoor_Gen2	—	—
yara	Sofacy_Jun16_Sample1	—	—
yara	Sofacy_Jun16_Sample2	—	—
yara	Sofacy_Jun16_Sample3	—	—
yara	Sphinx_Moth_cudacrt	—	—
yara	Sphinx_Moth_h2t	—	—
yara	XOR_DDosv1	—	—
yara	Sphinx_Moth_kerberos32	—	—
yara	Sphinx_Moth_kerberos64	—	—
yara	Sphinx_Moth_nvcplex	—	—
yara	StuxNet_Malware_1	—	—
yara	Stuxnet_Malware_2	—	—
yara	StuxNet_dll	—	—
yara	Stuxnet_Shortcut_to	—	—
yara	Stuxnet_Malware_3	—	—
yara	Stuxnet_Malware_4	—	—
yara	Stuxnet_maindll_decrypted_unpacked	—	—
yara	Stuxnet_s7hkimdb	—	—
yara	Stuxnet_MadeInPython	—	—
yara	Apolmy_Privesc_Trojan	—	—
yara	WildNeutron_Sample_8	—	—
yara	WildNeutron_Sample_9	—	—
yara	WildNeutron_Sample_10	—	—
yara	WildNeutron_javacpl	—	—
yara	onimiki	—	—
yara	Winnti_signing_cert	—	—
yara	Winnti_malware_Nsiproxy	—	—
yara	Winnti_malware_UpdateDLL	—	—
yara	Winnti_malware_FWPK	—	—
yara	Winnti_malware_StreamPortal_Gen	—	—
yara	WoolenGoldfish_Generic_1	—	—
yara	WoolenGoldfish_Generic_2	—	—
yara	WoolenGoldfish_Generic_3	—	—