Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	CN_Hacktool_1433_Scanner	—	—
yara	CN_Hacktool_1433_Scanner_Comp2	—	—
yara	WCE_Modified_1_1014	—	—
yara	ReactOS_cmd_valid	—	—
yara	iKAT_wmi_rundll	—	—
yara	iKAT_revelations	—	—
yara	iKAT_priv_esc_tasksch	—	—
yara	iKAT_command_lines_agent	—	—
yara	iKAT_cmd_as_dll	—	—
yara	iKAT_tools_nmap	—	—
yara	iKAT_startbar	—	—
yara	iKAT_gpdisable_customcmd_kitrap0d_uacpoc	—	—
yara	iKAT_Tool_Generic	—	—
yara	BypassUac_9	—	—
yara	BypassUacDll_6	—	—
yara	BypassUacDll_7	—	—
yara	BypassUac_EXE	—	—
yara	APT_Proxy_Malware_Packed_dev	—	—
yara	Tzddos_DDoS_Tool_CN	—	—
yara	Ncat_Hacktools_CN	—	—
yara	MS08_067_Exploit_Hacktools_CN	—	—
yara	Hacktools_CN_Burst_sql	—	—
yara	Hacktools_CN_Panda_445TOOL	—	—
yara	Hacktools_CN_Panda_445	—	—
yara	Hacktools_CN_WinEggDrop	—	—
yara	Hacktools_CN_Scan_BAT	—	—
yara	Hacktools_CN_Panda_Burst	—	—
yara	Hacktools_CN_445_cmd	—	—
yara	Hacktools_CN_GOGOGO_Bat	—	—
yara	Hacktools_CN_Burst_pass	—	—
yara	Hacktools_CN_JoHor_Posts_Killer	—	—
yara	Hacktools_CN_Panda_tesksd	—	—
yara	Hacktools_CN_Http	—	—
yara	Hacktools_CN_Burst_Start	—	—
yara	webshell_cmd_asp_5_1	—	—
yara	Hacktools_CN_Burst_Clear	—	—
yara	Hacktools_CN_Burst_Thecard	—	—
yara	Hacktools_CN_Burst_Blast	—	—
yara	VUBrute_VUBrute	—	—
yara	DK_Brute	—	—