Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	remsec_executable_blob_32	—	—
yara	apt_regin_2013_64bit_stage1	—	—
yara	apt_regin_dispatcher_disp_dll	—	—
yara	apt_regin_vfs	—	—
yara	apt_regin_rc5key	—	—
yara	apt_regin_2011_32bit_stage1	—	—
yara	apt_regin_hopscotch	—	—
yara	apt_regin_legspin	—	—
yara	Regin_Sample_Set_1	—	—
yara	Regin_Sample_3	—	—
yara	Regin_Sample_2	—	—
yara	Regin_Sample_1	—	—
yara	Regin_Sample_Set_2	—	—
yara	Regin_sig_svcsstat	—	—
yara	Regin_APT_KernelDriver_Generic_C	—	—
yara	Regin_APT_KernelDriver_Generic_B	—	—
yara	Regin_APT_KernelDriver_Generic_A	—	—
yara	Misdat_Backdoor	—	—
yara	MiSType_Backdoor_Packed	—	—
yara	Misdat_Backdoor_Packed	—	—
yara	OpClandestineWolf	—	—
yara	OilRig_Malware_Campaign_Mal3	—	—
yara	EQGRP_BpfCreator_RHEL4	—	—
yara	OilRig_Campaign_Reconnaissance	—	—
yara	OilRig_Malware_Campaign_Mal2	—	—
yara	OilRig_Malware_Campaign_Gen3	—	—
yara	OilRig_Malware_Campaign_Gen2	—	—
yara	OilRig_Malware_Campaign_Mal1	—	—
yara	OilRig_Malware_Campaign_Gen1	—	—
yara	OPCLEAVER_CCProxy_Config	—	—
yara	OPCLEAVER_Parviz_Developer	—	—
yara	OPCLEAVER_zhmimikatz	—	—
yara	OPCLEAVER_zhLookUp	—	—
yara	OPCLEAVER_zhCat	—	—
yara	msvcrt_Win7x86	—	—
yara	OPCLEAVER_wndTest	—	—
yara	OPCLEAVER_pvz_out	—	—
yara	OPCLEAVER_pvz_in	—	—
yara	OPCLEAVER_mimikatzWrapper	—	—
yara	OPCLEAVER_kagent	—	—