Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	HKTL_NET_GUID_Internal_Monologue	—	—
yara	HKTL_NET_GUID_GRAT2	—	—
yara	HKTL_NET_GUID_PowerShdll	—	—
yara	HKTL_NET_GUID_CsharpAmsiBypass	—	—
yara	HKTL_NET_GUID_HastySeries	—	—
yara	HKTL_NET_GUID_DreamProtectorFree	—	—
yara	HKTL_NET_GUID_RedSharp	—	—
yara	HKTL_NET_GUID_ESC	—	—
yara	HKTL_NET_GUID_Csharp_Loader	—	—
yara	HKTL_NET_GUID_bantam	—	—
yara	HKTL_NET_GUID_SharpTask	—	—
yara	HKTL_NET_GUID_WindowsPlague	—	—
yara	HKTL_NET_GUID_Misc_CSharp	—	—
yara	HKTL_NET_GUID_SharpSpray	—	—
yara	HKTL_NET_GUID_Obfuscator	—	—
yara	HKTL_NET_GUID_SafetyKatz	—	—
yara	HKTL_NET_GUID_Dropless_Malware	—	—
yara	HKTL_NET_GUID_Mass_RAT	—	—
yara	HKTL_NET_GUID_Browser_ExternalC2	—	—
yara	HKTL_NET_GUID_OffensivePowerShellTasking	—	—
yara	HKTL_NET_GUID_DoHC2	—	—
yara	HKTL_NET_GUID_SyscallPOC	—	—
yara	HKTL_NET_GUID_Pen_Test_Tools	—	—
yara	webshell_asp_ice	—	—
yara	HKTL_NET_GUID_The_Collection	—	—
yara	HKTL_NET_GUID_Change_Lockscreen	—	—
yara	HKTL_NET_GUID_LOLBITS	—	—
yara	HKTL_NET_GUID_Keylogger	—	—
yara	HKTL_NET_GUID_CVE_2020_1337	—	—
yara	HKTL_NET_GUID_SharpLogger	—	—
yara	HKTL_NET_GUID_AsyncRAT_C_Sharp	—	—
yara	HKTL_NET_GUID_DarkFender	—	—
yara	HKTL_NET_GUID_MinerDropper	—	—
yara	HKTL_NET_GUID_SharpDomainSpray	—	—
yara	HKTL_NET_GUID_iSpyKeylogger	—	—
yara	HKTL_NET_GUID_SolarFlare	—	—
yara	HKTL_NET_GUID_Snaffler	—	—
yara	HKTL_NET_GUID_SharpShares	—	—
yara	HKTL_NET_GUID_SharpEDRChecker	—	—
yara	HKTL_NET_GUID_SharpClipHistory	—	—