Detection rules
Every rule tracked across all seven sources, newest updates first.
| Source | Rule | Status | Updated |
|---|---|---|---|
| yara | agenttesla_smtp_variant | — | — |
| yara | BeEF_browser_hooked | — | — |
| yara | GEN_PowerShell | — | — |
| yara | Generic_ATMPot | — | — |
| yara | ATM_HelloWorld | — | — |
| yara | Windows_Malware | — | — |
| yara | Agenttesla | — | — |
| yara | almashreq_agent_dotnet | — | — |
| yara | alina | — | — |
| yara | andromeda | — | — |
| yara | Worm_Gamarue | — | — |
| yara | andromeda_bot | — | — |
| yara | Arkei | — | — |
| yara | AthenaHTTP | — | — |
| yara | AthenaIRC | — | — |
| yara | Atmos_Malware | — | — |
| yara | Atmos_Packed_Malware | — | — |
| yara | Atmos_Builder | — | — |
| yara | custom_ssh_backdoor_server | — | — |
| yara | BlackRev | — | — |
| yara | BlackWorm | — | — |
| yara | BoousetCode | — | — |
| yara | Bublik | — | — |
| yara | Win32_Buzus_Softpulse | — | — |
| yara | CAP_HookExKeylogger | — | — |
| yara | ChickenDOS | — | — |
| yara | md5_71a7c769e644d8cf3cf32419239212c7 | — | — |
| yara | ChickenDOS_Linux | — | — |
| yara | citadel13xy | — | — |
| yara | Citadel_Malware | — | — |
| yara | Binary_Drop_Certutil | — | — |
| yara | StegoKatz | — | — |
| yara | CookiesStrings | — | — |
| yara | Cookies | — | — |
| yara | CorkowDLL | — | — |
| yara | cxpidStrings | — | — |
| yara | cxpidCode | — | — |
| yara | Cythosia | — | — |
| yara | DDosTf | — | — |
| yara | Derkziel | — | — |