Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	multiple_webshells_0029	—	—
yara	mswin_check_lm_group	—	—
yara	xRAT20	—	—
yara	xRAT	—	—
yara	jRAT_conf	—	—
yara	zoxPNG_RAT	—	—
yara	xtreme_rat_1	—	—
yara	xtreme_rat_0	—	—
yara	xtremrat	—	—
yara	XtremeRAT	—	—
yara	multiple_php_webshells_2	—	—
yara	XtremeRATStrings	—	—
yara	WebShell_Uploader	—	—
yara	multiple_webshells_0030	—	—
yara	multiple_webshells_0031	—	—
yara	XtremeRATCode	—	—
yara	multiple_webshells_0032	—	—
yara	xtreme_rat	—	—
yara	Xtreme	—	—
yara	DarkSecurityTeam_Webshell	—	—
yara	TROJAN_Notepad_shell_crew	—	—
yara	TerminatorRat	—	—
yara	PHP_Cloaked_Webshell_SuperFetchExec	—	—
yara	shimratreporter	—	—
yara	shimrat	—	—
yara	ShadowTech	—	—
yara	ShadowTech_2	—	—
yara	sakula_v1_4	—	—
yara	sakula_v1_3	—	—
yara	sakula_v1_2	—	—
yara	sakula_v1_1	—	—
yara	sakula_v1_0	—	—
yara	WebShell_RemExp_asp_php	—	—
yara	WebShell_dC3_Security_Crew_Shell_PRiV	—	—
yara	unrecom	—	—
yara	VirusRat	—	—
yara	WebShell_simattacker	—	—
yara	Vertex	—	—
yara	WebShell_DTool_Pro	—	—
yara	UPX	—	—