Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Dubnium_Sample_1	—	—
yara	Dubnium_Sample_2	—	—
yara	Dubnium_Sample_3	—	—
yara	Dubnium_Sample_5	—	—
yara	Dubnium_Sample_6	—	—
yara	APT_Kaspersky_Duqu2_procexp	—	—
yara	Dubnium_Sample_7	—	—
yara	Dubnium_Sample_SSHOpenSSL	—	—
yara	apt_duqu2_loaders	—	—
yara	apt_duqu2_drivers	—	—
yara	Duqu2_Generic1	—	—
yara	APT_Kaspersky_Duqu2_SamsungPrint	—	—
yara	APT_Kaspersky_Duqu2_msi3_32	—	—
yara	EQGRP_noclient_3_0_5	—	—
yara	EQGRP_installdate	—	—
yara	EQGRP_teflondoor	—	—
yara	EQGRP_durablenapkin_solaris_2_0_1	—	—
yara	EQGRP_teflonhandle	—	—
yara	EQGRP_false	—	—
yara	EQGRP_bc_genpkt	—	—
yara	EQGRP_dn_1_0_2_1	—	—
yara	EQGRP_morel	—	—
yara	EQGRP_bc_parser	—	—
yara	EQGRP_1212	—	—
yara	EQGRP_1212_dehex	—	—
yara	install_get_persistent_filenames	—	—
yara	EQGRP_create_dns_injection	—	—
yara	EQGRP_screamingplow	—	—
yara	EQGRP_MixText	—	—
yara	EQGRP_tunnel_state_reader	—	—
yara	EQGRP_payload	—	—
yara	Equation_Kaspersky_GreyFishInstaller	—	—
yara	EQGRP_eligiblecandidate	—	—
yara	EQGRP_BUSURPER_2211_724	—	—
yara	EQGRP_networkProfiler_orderScans	—	—
yara	EQGRP_epicbanana_2_1_0_1	—	—
yara	EQGRP_sniffer_xml2pcap	—	—
yara	EQGRP_BananaAid	—	—
yara	EQGRP_bo	—	—
yara	EQGRP_SecondDate_2211	—	—