Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EQGRP_Extrabacon_Output	—	—
yara	EQGRP_callbacks	—	—
yara	EQGRP_tinyexec	—	—
yara	EQGRP_ssh_telnet_29	—	—
yara	msvcrt_WIN8AMD64	—	—
yara	EQGRP_eligiblebombshell_generic	—	—
yara	EQGRP_Implants_Gen1	—	—
yara	EQGRP_Implants_Gen2	—	—
yara	EQGRP_sploit	—	—
yara	EQGRP_BLIAR_BLIQUER	—	—
yara	EQGRP_durablenapkin_solaris_2_0_1	—	—
yara	EQGRP_teflondoor	—	—
yara	EQGRP_installdate	—	—
yara	EQGRP_noclient_3_0_5	—	—
yara	APT_Kaspersky_Duqu2_msi3_32	—	—
yara	APT_Kaspersky_Duqu2_SamsungPrint	—	—
yara	Duqu2_Generic1	—	—
yara	apt_duqu2_drivers	—	—
yara	apt_duqu2_loaders	—	—
yara	Dubnium_Sample_SSHOpenSSL	—	—
yara	Dubnium_Sample_7	—	—
yara	APT_Kaspersky_Duqu2_procexp	—	—
yara	Dubnium_Sample_6	—	—
yara	Dubnium_Sample_5	—	—
yara	Dubnium_Sample_3	—	—
yara	Dubnium_Sample_2	—	—
yara	Dubnium_Sample_1	—	—
yara	apt_win32_dll_bergard_pgv_pvid_variant	—	—
yara	XOR_4byte_Key	—	—
yara	Derusbi_Code_Signing_Cert	—	—
yara	Derusbi_Kernel_Driver_WD_UDFS	—	—
yara	derusbi_linux	—	—
yara	derusbi_kernel	—	—
yara	APT_Derusbi_Gen	—	—
yara	APT_Derusbi_DeepPanda	—	—
yara	Trojan_Derusbi	—	—
yara	apt_win_exe_trojan_derusbi	—	—
yara	apt_nix_elf_Derusbi_Linux_Strings	—	—
yara	apt_nix_elf_Derusbi_Linux_SharedMemCreation	—	—
yara	apt_nix_elf_derusbi_kernelModule	—	—