Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Empire_KeePassConfig	—	—
yara	Empire_Invoke_SSHCommand	—	—
yara	Empire_PowerShell_Framework_Gen1	—	—
yara	Empire_PowerUp_Gen	—	—
yara	Empire_PowerShell_Framework_Gen2	—	—
yara	Empire_Agent_Gen	—	—
yara	Empire_PowerShell_Framework_Gen3	—	—
yara	Empire_Invoke_InveighRelay_Gen	—	—
yara	Empire_KeePassConfig_Gen	—	—
yara	Intel_Virtualization_Wizard_dll	—	—
yara	IotReaper	—	—
yara	Backdoor_Jolob	—	—
yara	KINS_dropper	—	—
yara	KINS_DLL_zeus	—	—
yara	KelihosHlux	—	—
yara	md5_c647e85ad77fd9971ba709a08566935d	—	—
yara	MALW_KeyBase	—	—
yara	korlia	—	—
yara	Korplug_FAST	—	—
yara	Korplug	—	—
yara	Kovter	—	—
yara	Kraken_Bot_Sample	—	—
yara	Kwampirs	—	—
yara	LURK0Header	—	—
yara	SharedStrings	—	—
yara	LURK0	—	—
yara	CCTV0	—	—
yara	lateral_movement	—	—
yara	VisualDiscovery_Lonovo_Superfish_SSL_Hijack	—	—
yara	LinuxBew	—	—
yara	LinuxHelios	—	—
yara	moose	—	—
yara	LuaBot	—	—
yara	LuckyCatCode	—	—
yara	MSILStealer	—	—
yara	MacControlCode	—	—
yara	MacControlStrings	—	—
yara	MacControl	—	—
yara	MacGyverCap	—	—
yara	MacGyverCapInstaller	—	—