Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EquationGroup_Toolset_Apr17_drivers_Implant	—	—
yara	EquationGroup_Toolset_Apr17_Processes_Target	—	—
yara	EquationGroup_Toolset_Apr17_st_lp	—	—
yara	EquationGroup_Toolset_Apr17_FullThreadDump	—	—
yara	EquationGroup_Toolset_Apr17_EpWrapper	—	—
yara	EquationGroup_Toolset_Apr17_DiBa_Target_2000	—	—
yara	EquationGroup_Toolset_Apr17_DllLoad_Target	—	—
yara	CCTV0Header	—	—
yara	EquationGroup_Toolset_Apr17_EXPA	—	—
yara	EquationGroup_Toolset_Apr17_RemoteExecute_Target	—	—
yara	EquationGroup_Toolset_Apr17_DS_ParseLogs	—	—
yara	EquationGroup_Toolset_Apr17_Oracle_Implant	—	—
yara	EquationGroup_Toolset_Apr17_DmGz_Target	—	—
yara	EquationGroup_Toolset_Apr17_SetResourceName	—	—
yara	lost_door	—	—
yara	EquationGroup_Toolset_Apr17_Shares_Target	—	—
yara	EquationGroup_Toolset_Apr17_DUMPEL	—	—
yara	EquationGroup_Toolset_Apr17_ntfltmgr	—	—
yara	EquationGroup_Toolset_Apr17_DiBa_Target_BH	—	—
yara	EquationGroup_Toolset_Apr17_PC_LP	—	—
yara	EquationGroup_Toolset_Apr17_RemoteCommand_Lp	—	—
yara	md5_3ccdd51fe616c08daafd601589182d38	—	—
yara	EquationGroup_Toolset_Apr17_lp_mstcp	—	—
yara	EquationGroup_Toolset_Apr17_renamer	—	—
yara	EquationGroup_Toolset_Apr17_PC_Exploit	—	—
yara	EquationGroup_Toolset_Apr17_PC_Level3_Gen	—	—
yara	EquationGroup_Toolset_Apr17_put_Implant9x	—	—
yara	EquationGroup_Toolset_Apr17_promiscdetect_safe	—	—
yara	md5_4b69af81b89ba444204680d506a8e0a1	—	—
yara	EquationGroup_Toolset_Apr17_PacketScan_Implant	—	—
yara	EquationGroup_Toolset_Apr17_SetPorts	—	—
yara	EquationGroup_Toolset_Apr17_GrDo_FileScanner_Implant	—	—
yara	EquationGroup_Toolset_Apr17_msgks_mskgu	—	—
yara	EquationGroup_Toolset_Apr17_Ifconfig_Target	—	—
yara	EquationGroup_Toolset_Apr17_DiBa_Target	—	—
yara	Batel_export_function	—	—
yara	EquationGroup_Toolset_Apr17_Dsz_Implant	—	—
yara	EquationGroup_Toolset_Apr17_GenKey	—	—
yara	EquationGroup_Toolset_Apr17_wmi_Implant	—	—
yara	EquationGroup_Toolset_Apr17_clocksvc	—	—

← Prev Next →