Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Unit78020_Malware_1	—	—
yara	WinntiPharma	—	—
yara	Unit78020_Malware_Gen2	—	—
yara	Unit78020_Malware_Gen3	—	—
yara	APT_Uppercut	—	—
yara	WaterBug_wipbot_2013_core_PDF	—	—
yara	WaterBug_wipbot_2013_dll	—	—
yara	WaterBug_wipbot_2013_core	—	—
yara	WaterBug_turla_dropper	—	—
yara	WaterBug_fa_malware	—	—
yara	WaterBug_sav	—	—
yara	WildNeutron_Sample_1	—	—
yara	WildNeutron_Sample_2	—	—
yara	WoolenGoldfish_Sample_1	—	—
yara	WildNeutron_Sample_3	—	—
yara	WildNeutron_Sample_4	—	—
yara	WildNeutron_Sample_5	—	—
yara	WildNeutron_Sample_6	—	—
yara	WildNeutron_Sample_7	—	—
yara	EquationGroup_ebbisland	—	—
yara	EquationGroup_jackpop	—	—
yara	EquationGroup_parsescan	—	—
yara	EquationGroup_jscan	—	—
yara	EquationGroup_promptkill	—	—
yara	EquationGroup_epoxyresin_v1_0_0	—	—
yara	YayihStrings	—	—
yara	EquationGroup_estopmoonlit	—	—
yara	EquationGroup_envoytomato	—	—
yara	EquationGroup_smash	—	—
yara	EquationGroup_ratload	—	—
yara	EquationGroup_ys	—	—
yara	EquationGroup_ewok	—	—
yara	EquationGroup_xspy	—	—
yara	EquationGroup_estesfox	—	—
yara	EquationGroup_elatedmonkey_1_0_1_1	—	—
yara	EquationGroup_scanner	—	—
yara	EquationGroup__ftshell_ftshell_v3_10_3_0	—	—
yara	EquationGroup__scanner_scanner_v2_1_2	—	—
yara	EquationGroup__ghost_sparc_ghost_x86_3	—	—
yara	EquationGroup__pclean_v2_1_1_pclean_v2_1_1_4	—	—