Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	CN_Hacktool_MilkT_BAT	—	—
yara	CN_Hacktool_S_EXE_Portscanner	—	—
yara	CN_Hacktool_ScanPort_Portscanner	—	—
yara	CN_Hacktool_SSPort_Portscanner	—	—
yara	CN_Hacktool_BAT_PortsOpen	—	—
yara	Chinese_Hacktool_1014	—	—
yara	Powershell_Netcat	—	—
yara	Beastdoor_Backdoor	—	—
yara	Tiny_Network_Tool_Generic	—	—
yara	CN_Packed_Scanner	—	—
yara	CN_GUI_Scanner	—	—
yara	crack_Loader	—	—
yara	Angry_IP_Scanner_v2_08_ipscan	—	—
yara	stealth_Stealth	—	—
yara	BypassUac_3	—	—
yara	scanarator_iis	—	—
yara	BluesPortScan	—	—
yara	StealthWasp_s_Basic_PortScanner_v1_2	—	—
yara	ProPort_zip_Folder_ProPort	—	—
yara	portscan	—	—
yara	cgis4_cgis4	—	—
yara	_Bitchin_Threads_	—	—
yara	aolipsniffer	—	—
yara	scanarator	—	—
yara	PortRacer	—	—
yara	SuperScan4	—	—
yara	IP_Stealing_Utilities	—	—
yara	CGISscan_CGIScan	—	—
yara	FeliksPack3___Scanners_ipscan	—	—
yara	NetBIOS_Name_Scanner	—	—
yara	MooreR_Port_Scanner	—	—
yara	DomainScanV1_0	—	—
yara	Fierce2	—	—
yara	HackTool_Samples	—	—
yara	PScan_Portscan_1	—	—
yara	PwDump	—	—
yara	Amplia_Security_Tool	—	—
yara	WindowsCredentialEditor	—	—
yara	HKTL_Solarwinds_credential_stealer	—	—
yara	HKTL_NET_NAME_StageStrike	—	—