Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	md5_d30b23d1224438518d18e90c218d7c8b	—	—
yara	remsec_executable_blob_64	—	—
yara	md5_b579bff90970ec58862ea8c26014d643	—	—
yara	md5_ab63230ee24a988a4a9245c2456e4874	—	—
yara	md5_8e5f7f6523891a5dcefcbb1a79e5bbe9	—	—
yara	base64_hidden_in_image	—	—
yara	md5_24f2df1b9d49cfb02d8954b08dba471f	—	—
yara	eval_base64_decode_a	—	—
yara	md5_fb9e35bf367a106d18eb6aa0fe406437	—	—
yara	NetC	—	—
yara	RabbitStew32	—	—
yara	Vbr	—	—
yara	Network_WinXPx86	—	—
yara	LONGRUN_APT1	—	—
yara	MACROMAIL_APT1	—	—
yara	TrojanCookies_CCREW	—	—
yara	GEN_CCREW1	—	—
yara	hide_data_in_jpeg	—	—
yara	Elise	—	—
yara	EclipseSunCloudRAT	—	—
yara	MoonProject	—	—
yara	BOUNCER_DLL_APT1	—	—
yara	EquationGroup_Toolset_Apr17_DiBa_Target_2000	—	—
yara	RUAG_Cobra_Malware	—	—
yara	ccrewDownloader1	—	—
yara	remsec_packer_B	—	—
yara	ccrewDownloader2	—	—
yara	ccrewSSLBack3	—	—
yara	DropBear_SSH_Server	—	—
yara	BlackEnergy_BackdoorPass_DropBear_SSH	—	—
yara	BlackEnergy_KillDisk_1	—	—
yara	BlackEnergy_KillDisk_2	—	—
yara	BlackEnergy_Driver_USBMDM	—	—
yara	BlackEnergy_Driver_AMDIDE	—	—
yara	Emdivi_SFX	—	—
yara	Emdivi_Gen1	—	—
yara	Emdivi_Gen2	—	—
yara	Emdivi_Gen3	—	—
yara	Emdivi_Gen4	—	—
yara	apt_c16_win_disk_pcclient	—	—