Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	ccrewSSLBack1	—	—
yara	ccrewMiniasp	—	—
yara	ccrewDownloader2	—	—
yara	GLOOXMAIL_APT1	—	—
yara	Mirai_4	—	—
yara	KURTON_APT1	—	—
yara	Elise	—	—
yara	EclipseSunCloudRAT	—	—
yara	GOGGLES_APT1	—	—
yara	malware_apt15_bs2005	—	—
yara	malware_apt15_royaldll	—	—
yara	malware_apt15_royaldll_2	—	—
yara	malware_apt15_exchange_tool	—	—
yara	malware_apt15_generic	—	—
yara	APT17_Sample_FXSST_DLL	—	—
yara	GRIZZLY_STEPPE_Malware_1	—	—
yara	GRIZZLY_STEPPE_Malware_2	—	—
yara	PAS_TOOL_PHP_WEB_KIT_mod	—	—
yara	WebShell_PHP_Web_Kit_v3	—	—
yara	WebShell_PHP_Web_Kit_v4	—	—
yara	APT3102Code	—	—
yara	APT3102Strings	—	—
yara	APT9002Code	—	—
yara	APT9002Strings	—	—
yara	APT9002	—	—
yara	FE_APT_9002	—	—
yara	apt_backspace	—	—
yara	APT_bestia	—	—
yara	BlackEnergy_BE_2	—	—
yara	BlackEnergy_VBS_Agent	—	—
yara	apt_c16_win_memory_pcclient	—	—
yara	DropBear_SSH_Server	—	—
yara	BlackEnergy_BackdoorPass_DropBear_SSH	—	—
yara	BlackEnergy_KillDisk_1	—	—
yara	BlackEnergy_KillDisk_2	—	—
yara	BlackEnergy_Driver_USBMDM	—	—
yara	BlackEnergy_Driver_AMDIDE	—	—
yara	Emdivi_SFX	—	—
yara	Emdivi_Gen1	—	—
yara	Emdivi_Gen2	—	—