Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	dragos_crashoverride_moduleStrings	—	—
yara	Codoso_PGV_PVID_2	—	—
yara	Codoso_PGV_PVID_1	—	—
yara	dragos_crashoverride_exporting_dlls	—	—
yara	dragos_crashoverride_suspcious	—	—
yara	dragos_crashoverride_name_search	—	—
yara	dragos_crashoverride_hashes	—	—
yara	dragos_crashoverride_weirdMutex	—	—
yara	dragos_crashoverride_serviceStomper	—	—
yara	dragos_crashoverride_wiperModuleRegistry	—	—
yara	dragos_crashoverride_wiperFileManipulation	—	—
yara	ROKRAT_loader	—	—
yara	ROKRAT_payload	—	—
yara	Anthem_DeepPanda_sl_txt_packed	—	—
yara	Anthem_DeepPanda_lot1	—	—
yara	Anthem_DeepPanda_htran_exe	—	—
yara	Anthem_DeepPanda_Trojan_Kakfum	—	—
yara	APT_DeputyDog_Fexel	—	—
yara	APT_DeputyDog	—	—
yara	apt_nix_elf_derusbi	—	—
yara	apt_nix_elf_derusbi_kernelModule	—	—
yara	apt_nix_elf_Derusbi_Linux_SharedMemCreation	—	—
yara	apt_nix_elf_Derusbi_Linux_Strings	—	—
yara	apt_win_exe_trojan_derusbi	—	—
yara	Trojan_Derusbi	—	—
yara	APT_Derusbi_DeepPanda	—	—
yara	APT_Derusbi_Gen	—	—
yara	derusbi_kernel	—	—
yara	derusbi_linux	—	—
yara	Derusbi_Kernel_Driver_WD_UDFS	—	—
yara	Derusbi_Code_Signing_Cert	—	—
yara	XOR_4byte_Key	—	—
yara	apt_win32_dll_bergard_pgv_pvid_variant	—	—
yara	Dubnium_Sample_1	—	—
yara	Dubnium_Sample_2	—	—
yara	Dubnium_Sample_3	—	—
yara	Dubnium_Sample_5	—	—
yara	Dubnium_Sample_6	—	—
yara	APT_Kaspersky_Duqu2_procexp	—	—
yara	Dubnium_Sample_7	—	—