Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	LinuxHacktool_eyes_pscan2	—	—
yara	LinuxHacktool_eyes_a	—	—
yara	LinuxHacktool_eyes_mass	—	—
yara	LinuxHacktool_eyes_pscan2_2	—	—
yara	CN_Portscan	—	—
yara	WMI_vbs	—	—
yara	CN_Toolset__XScanLib_XScanLib_XScanLib	—	—
yara	CN_Toolset_NTscan_PipeCmd	—	—
yara	CN_Toolset_LScanPortss_2	—	—
yara	CN_Toolset_sig_1433_135_sqlr	—	—
yara	Mimikatz_Memory_Rule_1	—	—
yara	Mimikatz_Memory_Rule_2	—	—
yara	mimikatz	—	—
yara	lsadump	—	—
yara	Mimikatz_Logfile	—	—
yara	AppInitHook	—	—
yara	VSSown_VBS	—	—
yara	wineggdrop	—	—
yara	Payload_Exe2Hex	—	—
yara	MSIETabularActivex	—	—
yara	JavaDeploymentToolkit	—	—
yara	FlashNewfunction	—	—
yara	CVE_2012_0158_KeyBoy	—	—
yara	cve_2013_0074	—	—
yara	CVE_2013_0422	—	—
yara	CVE_2015_1701_Taihou	—	—
yara	cfm_shell	—	—
yara	Exploit_MS15_077_078	—	—
yara	Exploit_MS15_077_078_HackingTeam	—	—
yara	Mal_Dropper_httpEXE_from_CAB	—	—
yara	Mal_http_EXE	—	—
yara	Mal_PotPlayer_DLL	—	—
yara	Flash_CVE_2015_5119_APT3	—	—
yara	Linux_DirtyCow_Exploit	—	—
yara	potential_CVE_2017_11882	—	—
yara	rtf_cve2017_11882_ole	—	—
yara	rtf_cve2017_11882	—	—
yara	CVE_2018_20250	—	—
yara	aspx_shell	—	—
yara	crime_ole_loadswf_cve_2018_4878	—	—