Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara EquationGroup_Toolset_Apr17_Erraticgopher_1_0_1 — —
yara EquationGroup_Toolset_Apr17_Esteemaudit_2_1_0 — —
yara EquationGroup_Toolset_Apr17_Darkpulsar_1_1_0 — —
yara Mirai_2 — —
yara EquationGroup_Toolset_Apr17_Educatedscholar_1_0_0 — —
yara EquationGroup_Toolset_Apr17_Doublepulsar_1_3_1 — —
yara EquationGroup_Toolset_Apr17_Erraticgophertouch_1_0_1 — —
yara EquationGroup_Toolset_Apr17_Smbtouch_1_1_1 — —
yara EquationGroup_Toolset_Apr17_Educatedscholartouch_1_0_0 — —
yara EquationGroup_Toolset_Apr17_Esteemaudittouch_2_1_0 — —
yara EquationGroup_Toolset_Apr17_Rpctouch_2_1_0 — —
yara EquationGroup_Toolset_Apr17_Easypi_Explodingcan — —
yara EquationGroup_Toolset_Apr17_Eclipsedwingtouch_1_0_4 — —
yara EquationGroup_Toolset_Apr17_Iistouch_1_2_2 — —
yara EquationGroup_Toolset_Apr17_Namedpipetouch_2_0_0 — —
yara EquationGroup_Toolset_Apr17_Easybee_1_0_1 — —
yara EquationGroup_Toolset_Apr17_Regread_1_1_1 — —
yara Gafgyt_Botnet_HIHI — —
yara EquationGroup_Toolset_Apr17_Englishmansdentist_1_2_0 — —
yara EquationGroup_Toolset_Apr17_Architouch_Eternalsynergy_Smbtouch — —
yara EquationGroup_Toolset_Apr17_Eternalromance_2 — —
yara EquationGroup_Toolset_Apr17__Emphasismine — —
yara EquationGroup_Toolset_Apr17_Eternalromance — —
yara EquationGroup_Toolset_Apr17_Gen4 — —
yara genome — —
yara EquationGroup_Toolset_Apr17_Gen1 — —
yara EquationGroup_Toolset_Apr17_Gen2 — —
yara EquationGroup_Toolset_Apr17_Gen3 — —
yara EquationGroup_Toolset_Apr17_yak — —
yara EquationGroup_Toolset_Apr17_AdUser_Implant — —
yara EquationGroup_Toolset_Apr17_RemoteExecute_Implant — —
yara EquationGroup_Toolset_Apr17_Banner_Implant9x — —
yara EquationGroup_Toolset_Apr17_greatdoc_dll_config — —
yara EquationGroup_Toolset_Apr17_scanner — —
yara EquationGroup_Toolset_Apr17_Mcl_NtMemory_Std — —
yara EquationGroup_Toolset_Apr17_tacothief — —
yara EquationGroup_Toolset_Apr17_ntevt — —
yara EquationGroup_Toolset_Apr17_drivers_Implant — —
yara EquationGroup_Toolset_Apr17_Processes_Target — —
yara EquationGroup_Toolset_Apr17_st_lp — —