Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	HKTL_NET_GUID_nopowershell	—	—
yara	HKTL_NET_GUID_LimeLogger	—	—
yara	HKTL_NET_GUID_AggressorScripts	—	—
yara	HKTL_NET_GUID_Gopher	—	—
yara	HKTL_NET_GUID_AVIator	—	—
yara	HKTL_NET_GUID_njCrypter	—	—
yara	HKTL_NET_GUID_SharpMiniDump	—	—
yara	HKTL_NET_GUID_CinaRAT	—	—
yara	HKTL_NET_GUID_ToxicEye	—	—
yara	HKTL_NET_GUID_Disable_Windows_Defender	—	—
yara	HKTL_NET_GUID_DInvoke_PoC	—	—
yara	HKTL_NET_GUID_ReverseShell	—	—
yara	HKTL_NET_GUID_SharpC2	—	—
yara	HKTL_NET_GUID_SneakyExec	—	—
yara	HKTL_NET_GUID_UrbanBishopLocal	—	—
yara	HKTL_NET_GUID_SharpShell	—	—
yara	HKTL_NET_GUID_EvilWMIProvider	—	—
yara	HKTL_NET_GUID_GadgetToJScript	—	—
yara	HKTL_NET_GUID_AzureCLI_Extractor	—	—
yara	HKTL_NET_GUID_UAC_Escaper	—	—
yara	HKTL_NET_GUID_HTTPSBeaconShell	—	—
yara	HKTL_NET_GUID_AmsiScanBufferBypass	—	—
yara	HKTL_NET_GUID_ShellcodeLoader	—	—
yara	HKTL_NET_GUID_KeystrokeAPI	—	—
yara	HKTL_NET_GUID_ShellCodeRunner	—	—
yara	Hacktools_CN_Panda_tasksvr	—	—
yara	HKTL_NET_GUID_OffensiveCSharp	—	—
yara	HKTL_NET_GUID_SHAPESHIFTER	—	—
yara	HKTL_NET_GUID_Evasor	—	—
yara	HKTL_NET_GUID_Stracciatella	—	—
yara	HKTL_NET_GUID_logger	—	—
yara	HKTL_NET_GUID_Internal_Monologue	—	—
yara	HKTL_NET_GUID_GRAT2	—	—
yara	HKTL_NET_GUID_PowerShdll	—	—
yara	HKTL_NET_GUID_CsharpAmsiBypass	—	—
yara	HKTL_NET_GUID_HastySeries	—	—
yara	HKTL_NET_GUID_DreamProtectorFree	—	—
yara	HKTL_NET_GUID_RedSharp	—	—
yara	HKTL_NET_GUID_ESC	—	—
yara	HKTL_NET_GUID_Csharp_Loader	—	—