Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	IMPLANT_4_v1	—	—
yara	IMPLANT_4_v2	—	—
yara	MALW_trickbot_bankBot	—	—
yara	IMPLANT_4_v4	—	—
yara	IMPLANT_4_v5	—	—
yara	IMPLANT_4_v7	—	—
yara	IMPLANT_4_v8	—	—
yara	IMPLANT_4_v9	—	—
yara	Backdoor_APT_Mongal	—	—
yara	IMPLANT_4_v10	—	—
yara	IMPLANT_4_v11	—	—
yara	IMPLANT_4_v13	—	—
yara	IMPLANT_5_v1	—	—
yara	IMPLANT_5_v2	—	—
yara	IMPLANT_5_v3	—	—
yara	IMPLANT_5_v4	—	—
yara	IMPLANT_6_v1	—	—
yara	IMPLANT_6_v2	—	—
yara	IMPLANT_6_v3	—	—
yara	IMPLANT_6_v4	—	—
yara	IMPLANT_6_v5	—	—
yara	IMPLANT_6_v6	—	—
yara	IMPLANT_7_v1	—	—
yara	IMPLANT_8_v1	—	—
yara	IMPLANT_9_v1	—	—
yara	IMPLANT_10_v2	—	—
yara	Unidentified_Malware_Two	—	—
yara	bin_ndisk	—	—
yara	Hackingteam_Elevator_DLL	—	—
yara	HackingTeam_Elevator_EXE	—	—
yara	RCS_Backdoor	—	—
yara	RCS_Scout	—	—
yara	apt_hellsing_implantstrings	—	—
yara	apt_hiddencobra_binaries	—	—
yara	XMRIG_Miner	—	—
yara	apt_hellsing_installer	—	—
yara	apt_hellsing_proxytool	—	—
yara	apt_hellsing_xkat	—	—
yara	apt_hellsing_msgertype2	—	—
yara	apt_hellsing_irene	—	—