Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EquationGroup_Toolset_Apr17__ESKE_RPC2_8	—	—
yara	EquationGroup_Toolset_Apr17__LSADUMP_Lp_ModifyPrivilege_Lp_PacketScan_Lp_put_Lp_RemoteExecute_Lp_Windows_Lp_wmi_Lp_9	—	—
yara	EquationGroup_Toolset_Apr17__ETBL_ETRE_10	—	—
yara	EquationGroup_Toolset_Apr17__ELV_ESKE_ETBL_ETRE_EVFR_11	—	—
yara	EquationGroup_Toolset_Apr17__ELV_ESKE_EVFR_RideArea2_12	—	—
yara	BangatCode	—	—
yara	EquationGroup_Toolset_Apr17__ELV_ESKE_13	—	—
yara	EquationGroup_Toolset_Apr17__NameProbe_SMBTOUCH_14	—	—
yara	EquationGroup_Toolset_Apr17__ELV_ESKE_EVFR_RPC2_15	—	—
yara	EquationGroup_Toolset_Apr17__ELV_ESKE_EVFR_16	—	—
yara	EquationGroup_Toolset_Apr17__ETBL_ETRE_SMBTOUCH_17	—	—
yara	EquationGroup_scanner_output	—	—
yara	COZY_FANCY_BEAR_Hunt	—	—
yara	COZY_FANCY_BEAR_pagemgr_Hunt	—	—
yara	APT_fancybear_Downdelph_magic	—	—
yara	APT_fancybear_Downdelph_MBR	—	—
yara	Furtim_nativeDLL	—	—
yara	Furtim_Parent_1	—	—
yara	agenttesla_smtp_variant	—	—
yara	BeEF_browser_hooked	—	—
yara	GEN_PowerShell	—	—
yara	Generic_ATMPot	—	—
yara	ATM_HelloWorld	—	—
yara	Windows_Malware	—	—
yara	Agenttesla	—	—
yara	almashreq_agent_dotnet	—	—
yara	alina	—	—
yara	andromeda	—	—
yara	Worm_Gamarue	—	—
yara	andromeda_bot	—	—
yara	Arkei	—	—
yara	AthenaHTTP	—	—
yara	AthenaIRC	—	—
yara	Atmos_Malware	—	—
yara	Atmos_Packed_Malware	—	—
yara	Atmos_Builder	—	—
yara	custom_ssh_backdoor_server	—	—
yara	BlackRev	—	—
yara	BlackWorm	—	—
yara	BoousetCode	—	—