Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	hatman_compiled_python	—	—
yara	hatman_injector	—	—
yara	hatman_payload	—	—
yara	hatman_combined	—	—
yara	hatman	—	—
yara	TRITON_ICS_FRAMEWORK	—	—
yara	Tedroo	—	—
yara	xdedic_packed_syscan	—	—
yara	Tinba2	—	—
yara	MALW_TinyShell_backconnect_OSX	—	—
yara	MALW_TinyShell_backconnect_ELF	—	—
yara	MALW_TinyShell_backconnect_Gen	—	—
yara	MALW_TinyShell_backdoor_Gen	—	—
yara	ELF_Linux_Torte	—	—
yara	ELF_Linux_Torte_domains	—	—
yara	TreasureHunt	—	—
yara	MALW_systeminfo_trickbot_module	—	—
yara	MALW_dllinject_trickbot_module	—	—
yara	MALW_mailsercher_trickbot_module	—	—
yara	TrumpBot	—	—
yara	Upatre_Hazgurut	—	—
yara	urausy_skype_dat	—	—
yara	VidgrabCode	—	—
yara	VidgrabStrings	—	—
yara	Vidgrab	—	—
yara	TSC_Loader	—	—
yara	VirutFileInfector	—	—
yara	volgmer	—	—
yara	Wabot	—	—
yara	WarpCode	—	—
yara	WarpStrings	—	—
yara	Warp	—	—
yara	WimmieShellcode	—	—
yara	WimmieStrings	—	—
yara	Wimmie	—	—
yara	XHide	—	—
yara	yordanyan_activeagent	—	—
yara	Zegost	—	—
yara	Windows_Malware_Zeus	—	—
yara	Adwind	—	—