Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	x_way2_5_sqlcmd	—	—
yara	Win32_klock	—	—
yara	ipsearcher	—	—
yara	ms10048_x64	—	—
yara	hscangui	—	—
yara	GoodToolset_ms11080	—	—
yara	epathobj_exp64	—	—
yara	kelloworld_2	—	—
yara	HScan_v1_20_hscan	—	—
yara	_Project1_Generate_rejoice	—	—
yara	_hscan_hscan_hscangui	—	—
yara	kiwi_tools	—	—
yara	dubrute	—	—
yara	FinSpy_2	—	—
yara	FinSpy	—	—
yara	Powerkatz_DLL_Generic	—	—
yara	TOOLKIT_Mandibule	—	—
yara	HKTL_NET_GUID_LimeUSB_Csharp	—	—
yara	whosthere_alt	—	—
yara	iam_alt_iam_alt	—	—
yara	genhash_genhash	—	—
yara	iam_iamdll	—	—
yara	iam_iam	—	—
yara	whosthere_alt_pth	—	—
yara	whosthere	—	—
yara	Powerstager	—	—
yara	QuarksPwDump_Gen	—	—
yara	HKTL_NET_GUID_CSharpSetThreadContext	—	—
yara	HKTL_NET_GUID_DLL_Injection	—	—
yara	HKTL_NET_GUID_Ladon	—	—
yara	HKTL_NET_GUID_WhiteListEvasion	—	—
yara	HKTL_NET_GUID_Lime_Downloader	—	—
yara	HKTL_NET_GUID_DarkEye	—	—
yara	HKTL_NET_GUID_SharpKatz	—	—
yara	HKTL_NET_GUID_ExternalC2	—	—
yara	HKTL_NET_GUID_Povlsomware	—	—
yara	HKTL_NET_GUID_RunShellcode	—	—
yara	HKTL_NET_GUID_SharpLoginPrompt	—	—
yara	HKTL_NET_GUID_Adamantium_Thief	—	—
yara	HKTL_NET_GUID_PSByPassCLM	—	—