Detection rules
Every rule tracked across all seven sources, newest updates first.
| Source | Rule | Status | Updated |
|---|---|---|---|
| yara | Lavender | — | — |
| yara | Armadill | — | — |
| yara | zark20rk | — | — |
| yara | Ursnif | — | — |
| yara | Emotet | — | — |
| yara | SmokeLoader | — | — |
| yara | Datper | — | — |
| yara | PlugX | — | — |
| yara | Ramnit | — | — |
| yara | Hawkeye | — | — |
| yara | Lokibot | — | — |
| yara | Bebloh | — | — |
| yara | xxmm | — | — |
| yara | Azorult | — | — |
| yara | PoisonIvy | — | — |
| yara | netwire | — | — |
| yara | Nanocore | — | — |
| yara | Formbook | — | — |
| yara | Agenttesla_type1 | — | — |
| yara | ProxyTool2 | — | — |
| yara | Agenttesla_type2 | — | — |
| yara | Noderat | — | — |
| yara | Njrat2 | — | — |
| yara | Trickbot | — | — |
| yara | Remcos | — | — |
| yara | Quasar | — | — |
| yara | DeltaCharlie | — | — |
| yara | ProxyTool3 | — | — |
| yara | HotelAlfa | — | — |
| yara | IndiaAlfa_One | — | — |
| yara | IndiaAlfa_Two | — | — |
| yara | IndiaBravo_PapaAlfa | — | — |
| yara | IndiaBravo_RomeoCharlie | — | — |
| yara | IndiaBravo_RomeoBravo | — | — |
| yara | IndiaBravo_generic | — | — |
| yara | IndiaCharlie_One | — | — |
| yara | IndiaCharlie_Two | — | — |
| yara | IndiaDelta | — | — |
| yara | IndiaEcho | — | — |
| yara | IndiaGolf | — | — |