Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	WhiskeyDelta	—	—
yara	SMB_Worm_Tool	—	—
yara	Lightweight_Backdoor1	—	—
yara	LightweightBackdoor2	—	—
yara	LightweightBackdoor3	—	—
yara	LightweightBackdoor4	—	—
yara	LightweightBackdoor5	—	—
yara	LightweightBackdoor6	—	—
yara	ProxyTool1	—	—
yara	DestructiveTargetCleaningTool2	—	—
yara	DestructiveTargetCleaningTool3	—	—
yara	DestructiveTargetCleaningTool4	—	—
yara	DestructiveTargetCleaningTool5	—	—
yara	DestructiveTargetCleaningTool6	—	—
yara	DestructiveTargetCleaningTool7	—	—
yara	DestructiveTargetCleaningTool8	—	—
yara	Malwareusedbycyberthreatactor1	—	—
yara	Malwareusedbycyberthreatactor2	—	—
yara	Malwareusedbycyberthreatactor3	—	—
yara	wiper_unique_strings	—	—
yara	wiper_encoded_strings	—	—
yara	createP2P	—	—
yara	firewallOpener	—	—
yara	Caracachs	—	—
yara	StringDotSimplified	—	—
yara	searchinject	—	—
yara	FakeTLS_ServerHelloGetSelectedCipher	—	—
yara	XORDecodeA7	—	—
yara	DynamicAPILoading	—	—
yara	DNSCalcStyleEncodeAndDecode	—	—
yara	GenerateTLSClientHelloPacket_Test	—	—
yara	RC4SboxKeyGen	—	—
yara	RandomTimestampGenerator	—	—
yara	CPUInfoExtraction	—	—
yara	SuicideScriptL1	—	—
yara	SuicideScriptR1_Multi	—	—
yara	SuicideScriptR	—	—
yara	blackpos_v2	—	—
yara	dump_tool	—	—
yara	osql_tool	—	—