Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	IMPLANT_8_v1	—	—
yara	IMPLANT_9_v1	—	—
yara	IMPLANT_10_v2	—	—
yara	Unidentified_Malware_Two	—	—
yara	bin_ndisk	—	—
yara	Hackingteam_Elevator_DLL	—	—
yara	HackingTeam_Elevator_EXE	—	—
yara	RCS_Backdoor	—	—
yara	RCS_Scout	—	—
yara	apt_hellsing_implantstrings	—	—
yara	apt_hiddencobra_binaries	—	—
yara	XMRIG_Miner	—	—
yara	apt_hellsing_installer	—	—
yara	apt_hellsing_proxytool	—	—
yara	apt_hellsing_xkat	—	—
yara	apt_hellsing_msgertype2	—	—
yara	apt_hellsing_irene	—	—
yara	apt_hiddencobra_rsakey	—	—
yara	Regin_APT_KernelDriver_Generic_A	—	—
yara	Regin_APT_KernelDriver_Generic_B	—	—
yara	Regin_APT_KernelDriver_Generic_C	—	—
yara	Regin_sig_svcsstat	—	—
yara	Regin_Sample_Set_2	—	—
yara	Regin_Sample_1	—	—
yara	Regin_Sample_2	—	—
yara	Regin_Sample_3	—	—
yara	Regin_Sample_Set_1	—	—
yara	apt_regin_legspin	—	—
yara	apt_regin_hopscotch	—	—
yara	apt_regin_2011_32bit_stage1	—	—
yara	apt_regin_rc5key	—	—
yara	apt_regin_vfs	—	—
yara	apt_regin_dispatcher_disp_dll	—	—
yara	apt_regin_2013_64bit_stage1	—	—
yara	remsec_executable_blob_32	—	—
yara	apt_ProjectSauron_pipe_backdoor	—	—
yara	apt_ProjectSauron_encrypted_LSA	—	—
yara	apt_ProjectSauron_encrypted_SSPI	—	—
yara	apt_ProjectSauron_MyTrampoline	—	—
yara	apt_ProjectSauron_encrypted_container	—	—