Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Industroyer_Malware_4	—	—
yara	Industroyer_Malware_5	—	—
yara	IronTiger_ASPXSpy	—	—
yara	IronTiger_ChangePort_Toolkit_driversinstall	—	—
yara	IronTiger_ChangePort_Toolkit_ChangePortExe	—	—
yara	IronTiger_dllshellexc2010	—	—
yara	IronTiger_dnstunnel	—	—
yara	IronTiger_EFH3_encoder	—	—
yara	IronTiger_GetPassword_x64	—	—
yara	IronTiger_GetUserInfo	—	—
yara	IronTiger_Gh0stRAT_variant	—	—
yara	IronTiger_GTalk_Trojan	—	—
yara	IronTiger_HTTPBrowser_Dropper	—	—
yara	IronTiger_HTTP_SOCKS_Proxy_soexe	—	—
yara	IronTiger_NBDDos_Gh0stvariant_dropper	—	—
yara	IronTiger_PlugX_DosEmulator	—	—
yara	MongalCode	—	—
yara	IronTiger_PlugX_FastProxy	—	—
yara	IronTiger_PlugX_Server	—	—
yara	IronTiger_ReadPWD86	—	—
yara	IronTiger_Ring_Gh0stvariant	—	—
yara	IronTiger_wmiexec	—	—
yara	IronPanda_DNSTunClient	—	—
yara	IronPanda_Malware1	—	—
yara	IronPanda_Webshell_JSP	—	—
yara	IronPanda_Malware_Htran	—	—
yara	IronPanda_Malware2	—	—
yara	IronPanda_Malware3	—	—
yara	IronPanda_Malware4	—	—
yara	MongalStrings	—	—
yara	rtf_Kaba_jDoe	—	—
yara	TidePool_Malware	—	—
yara	KeyBoy_Dropper	—	—
yara	KeyBoy_Backdoor	—	—
yara	new_keyboy_export	—	—
yara	new_keyboy_header_codes	—	—
yara	Mongal	—	—
yara	keyboy_commands	—	—
yara	keyboy_errors	—	—
yara	keyboy_systeminfo	—	—