Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	remsec_packer_u	—	—
yara	PM_Zip_with_js	—	—
yara	APT1_WEBC2_RAVE	—	—
yara	APT1_WEBC2_QBP	—	—
yara	APT1_WEBC2_HEAD	—	—
yara	RooterStrings	—	—
yara	pos_jack	—	—
yara	onepage_or_checkout	—	—
yara	md5_4aa900ddd4f1848a15c61a9b7acd5035	—	—
yara	md5_39ca2651740c2cef91eb82161575348b	—	—
yara	COMBOS_APT1	—	—
yara	DAIRY_APT1	—	—
yara	GLOOXMAIL_APT1	—	—
yara	HACKSFASE1_APT1	—	—
yara	md5_fd141197c89d27b30821f3de8627ac38	—	—
yara	hidden_file_upload_in_503	—	—
yara	hide_data_in_jpeg	—	—
yara	md5_24f2df1b9d49cfb02d8954b08dba471f	—	—
yara	md5_d30b23d1224438518d18e90c218d7c8b	—	—
yara	HACKSFASE2_APT1	—	—
yara	is__Mirai_gen7	—	—
yara	LIGHTDART_APT1	—	—
yara	AURIGA_APT1	—	—
yara	AURIGA_driver_APT1	—	—
yara	BANGAT_APT1	—	—
yara	BISCUIT_GREENCAT_APT1	—	—
yara	BOUNCER_APT1	—	—
yara	MANITSME_APT1	—	—
yara	MINIASP_APT1	—	—
yara	NEWSREELS_APT1	—	—
yara	SEASALT_APT1	—	—
yara	STARSYPOUND_APT1	—	—
yara	SWORD_APT1	—	—
yara	thequickbrow_APT1	—	—
yara	TABMSGSQL_APT1	—	—
yara	CCREWBACK1	—	—
yara	APT1_WEBC2_CSON	—	—
yara	APT1_WEBC2_CLOVER	—	—
yara	APT1_WEBC2_BOLID	—	—
yara	APT1_WEBC2_ADSPACE	—	—