Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Malwareusedbycyberthreatactor3	—	—
yara	Malwareusedbycyberthreatactor2	—	—
yara	Malwareusedbycyberthreatactor1	—	—
yara	DestructiveTargetCleaningTool8	—	—
yara	DestructiveTargetCleaningTool7	—	—
yara	DestructiveTargetCleaningTool6	—	—
yara	DestructiveTargetCleaningTool5	—	—
yara	DestructiveTargetCleaningTool4	—	—
yara	DestructiveTargetCleaningTool3	—	—
yara	DestructiveTargetCleaningTool2	—	—
yara	ProxyTool1	—	—
yara	LightweightBackdoor6	—	—
yara	LightweightBackdoor5	—	—
yara	LightweightBackdoor4	—	—
yara	LightweightBackdoor3	—	—
yara	LightweightBackdoor2	—	—
yara	Lightweight_Backdoor1	—	—
yara	SMB_Worm_Tool	—	—
yara	WhiskeyDelta	—	—
yara	WhiskeyCharlie	—	—
yara	WhiskeyBravo	—	—
yara	WhiskeyAlfa	—	—
yara	UniformJuliett	—	—
yara	UniformAlfa	—	—
yara	TangoBravo	—	—
yara	Webshell_and_Exploit_CN_APT_HK	—	—
yara	FSO_s_ajan_2	—	—
yara	HDConfig	—	—
yara	r57shell_3	—	—
yara	HYTop2006_rar_Folder_2006	—	—
yara	BIN_Server	—	—
yara	phpshell_3	—	—
yara	SetupBDoor	—	—
yara	portlessinst	—	—
yara	ZXshell2_0_rar_Folder_nc	—	—
yara	cmdShell	—	—
yara	down_rar_Folder_down	—	—
yara	vanquish_2	—	—
yara	shelltools_g0t_root_xwhois	—	—
yara	pwreveal	—	—