Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	HKTL_NET_NAME_K8tools	—	—
yara	HKTL_NET_NAME_HTTPSBeaconShell	—	—
yara	HKTL_NET_NAME_Ghostpack_CompiledBinaries	—	—
yara	HKTL_NET_NAME_metasploit_sharp	—	—
yara	HKTL_NET_NAME_trevorc2	—	—
yara	HKTL_NET_NAME_petaqc2	—	—
yara	HKTL_NET_NAME_NativePayload_DNS2	—	—
yara	HKTL_NET_NAME_cve_2017_7269_tool	—	—
yara	HKTL_NET_NAME_AggressiveProxy	—	—
yara	HKTL_NET_NAME_MSBuildAPICaller	—	—
yara	HKTL_NET_NAME_GrayKeylogger	—	—
yara	HKTL_NET_NAME_weevely3	—	—
yara	HKTL_NET_NAME_FudgeC2	—	—
yara	HKTL_NET_NAME_NativePayload_Reverse_tcp	—	—
yara	HKTL_NET_NAME_SharpHose	—	—
yara	HKTL_NET_NAME_RAT_NjRat_0_7d_modded_source_code	—	—
yara	HKTL_NET_NAME_RdpThief	—	—
yara	HKTL_NET_NAME_RunasCs	—	—
yara	HKTL_NET_NAME_NativePayload_IP6DNS	—	—
yara	HKTL_NET_NAME_NativePayload_ARP	—	—
yara	HKTL_NET_NAME_C2Bridge	—	—
yara	HKTL_NET_NAME_Infrastructure_Assessment	—	—
yara	HKTL_NET_NAME_shellcodeTester	—	—
yara	HKTL_NET_NAME_gray_hat_csharp_code	—	—
yara	HKTL_NET_NAME_NativePayload_ReverseShell	—	—
yara	HKTL_NET_NAME_DotNetAVBypass	—	—
yara	HKTL_NET_NAME_HexyRunner	—	—
yara	HKTL_NET_NAME_SharpOffensiveShell	—	—
yara	HKTL_NET_NAME_reconness	—	—
yara	HKTL_NET_NAME_tvasion	—	—
yara	HKTL_NET_NAME_ibombshell	—	—
yara	HKTL_NET_NAME_RemoteProcessInjection	—	—
yara	HKTL_NET_NAME_njRAT_0_7d_Stub_CSharp	—	—
yara	HKTL_NET_NAME_CACTUSTORCH	—	—
yara	HKTL_NET_NAME_PandaSniper	—	—
yara	HKTL_NET_NAME_xbapAppWhitelistBypassPOC	—	—
yara	Hacktools_CN_Burst_sql	—	—
yara	Hacktools_CN_Panda_445TOOL	—	—
yara	Hacktools_CN_Panda_445	—	—
yara	Hacktools_CN_WinEggDrop	—	—

← Prev Next →