Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EquationGroup_Toolset_Apr17_Shares_Target	—	—
yara	EquationGroup_Toolset_Apr17_DUMPEL	—	—
yara	EquationGroup_Toolset_Apr17_ntfltmgr	—	—
yara	EquationGroup_Toolset_Apr17_DiBa_Target_BH	—	—
yara	EquationGroup_Toolset_Apr17_PC_LP	—	—
yara	EquationGroup_Toolset_Apr17_RemoteCommand_Lp	—	—
yara	md5_3ccdd51fe616c08daafd601589182d38	—	—
yara	EquationGroup_Toolset_Apr17_lp_mstcp	—	—
yara	EquationGroup_Toolset_Apr17_renamer	—	—
yara	EquationGroup_Toolset_Apr17_PC_Exploit	—	—
yara	EquationGroup_Toolset_Apr17_PC_Level3_Gen	—	—
yara	EquationGroup_Toolset_Apr17_put_Implant9x	—	—
yara	EquationGroup_Toolset_Apr17_promiscdetect_safe	—	—
yara	md5_4b69af81b89ba444204680d506a8e0a1	—	—
yara	EquationGroup_Toolset_Apr17_PacketScan_Implant	—	—
yara	EquationGroup_Toolset_Apr17_SetPorts	—	—
yara	EquationGroup_Toolset_Apr17_GrDo_FileScanner_Implant	—	—
yara	EquationGroup_Toolset_Apr17_msgks_mskgu	—	—
yara	EquationGroup_Toolset_Apr17_Ifconfig_Target	—	—
yara	EquationGroup_Toolset_Apr17_DiBa_Target	—	—
yara	Batel_export_function	—	—
yara	EquationGroup_Toolset_Apr17_Dsz_Implant	—	—
yara	EquationGroup_Toolset_Apr17_GenKey	—	—
yara	EquationGroup_Toolset_Apr17_wmi_Implant	—	—
yara	EquationGroup_Toolset_Apr17_clocksvc	—	—
yara	EquationGroup_Toolset_Apr17_xxxRIDEAREA	—	—
yara	EquationGroup_Toolset_Apr17_yak_min_install	—	—
yara	success_fail_codes_fallchill	—	—
yara	EquationGroup_Toolset_Apr17_SetOurAddr	—	—
yara	EquationGroup_Toolset_Apr17_GetAdmin_LSADUMP_ModifyPrivilege_Implant	—	—
yara	EquationGroup_Toolset_Apr17_SendPKTrigger	—	—
yara	EquationGroup_Toolset_Apr17_DmGz_Target_2	—	—
yara	EquationGroup_Toolset_Apr17_mstcp32_DXGHLP16_tdip	—	—
yara	EquationGroup_Toolset_Apr17_regprobe	—	—
yara	EquationGroup_Toolset_Apr17_DoubleFeatureDll_dll_2	—	—
yara	EquationGroup_Toolset_Apr17_GangsterThief_Implant	—	—
yara	EquationGroup_Toolset_Apr17_SetCallbackPorts	—	—
yara	EquationGroup_Toolset_Apr17_DiBa_Target_BH_2000	—	—
yara	EquationGroup_Toolset_Apr17_rc5	—	—
yara	EquationGroup_Toolset_Apr17_PC_Level_Generic	—	—

← Prev Next →