Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	WebShell_CmdAsp_asp_php	—	—
yara	WebShell_NCC_Shell	—	—
yara	WebShell_php_webshells_README	—	—
yara	WebShell_backupsql	—	—
yara	WebShell_AK_74_Security_Team_Web_Shell_Beta_Version	—	—
yara	WebShell_php_webshells_cpanel	—	—
yara	WebShell_accept_language	—	—
yara	WebShell_php_webshells_529	—	—
yara	WebShell_STNC_WebShell_v0_8	—	—
yara	WebShell_php_webshells_tryag	—	—
yara	WebShell_dC3_Security_Crew_Shell_PRiV_2	—	—
yara	WebShell_qsd_php_backdoor	—	—
yara	WebShell_php_webshells_spygrup	—	—
yara	WebShell_Web_shell__c_ShAnKaR	—	—
yara	WebShell_Ayyildiz_Tim___AYT__Shell_v_2_1_Biz	—	—
yara	WebShell_Gamma_Web_Shell	—	—
yara	WebShell_php_webshells_aspydrv	—	—
yara	WebShell_JspWebshell_1_2_2	—	—
yara	WebShell_g00nshell_v1_3	—	—
yara	WebShell_WinX_Shell	—	—
yara	WebShell_PHANTASMA	—	—
yara	WebShell_php_webshells_cw	—	—
yara	WebShell_php_include_w_shell	—	—
yara	WebShell_mysql_tool	—	—
yara	WebShell_PhpSpy_Ver_2006	—	—
yara	WebShell_ZyklonShell	—	—
yara	sendmail	—	—
yara	WebShell_php_webshells_myshell	—	—
yara	WebShell_php_webshells_lolipop	—	—
yara	WebShell_simple_cmd	—	—
yara	WebShell_go_shell	—	—
yara	WebShell_aZRaiLPhp_v1_0	—	—
yara	WebShell_webshells_zehir4	—	—
yara	WebShell_zehir4_asp_php	—	—
yara	binder2_binder2	—	—
yara	WebShell_php_webshells_lostDC	—	—
yara	WebShell_CasuS_1_5	—	—
yara	WebShell_ftpsearch	—	—
yara	WebShell__Cyber_Shell_cybershell_Cyber_Shell__v_1_0_	—	—
yara	WebShell__Ajax_PHP_Command_Shell_Ajax_PHP_Command_Shell_soldierofallah	—	—