Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	byshell063_ntboot_2	—	—
yara	u_uay	—	—
yara	bin_wuaus	—	—
yara	pwreveal	—	—
yara	shelltools_g0t_root_xwhois	—	—
yara	vanquish_2	—	—
yara	down_rar_Folder_down	—	—
yara	cmdShell	—	—
yara	ZXshell2_0_rar_Folder_nc	—	—
yara	portlessinst	—	—
yara	SetupBDoor	—	—
yara	phpshell_3	—	—
yara	BIN_Server	—	—
yara	HYTop2006_rar_Folder_2006	—	—
yara	r57shell_3	—	—
yara	HDConfig	—	—
yara	FSO_s_ajan_2	—	—
yara	Webshell_and_Exploit_CN_APT_HK	—	—
yara	JSP_Browser_APT_webshell	—	—
yara	JSP_jfigueiredo_APT_webshell	—	—
yara	JSP_jfigueiredo_APT_webshell_2	—	—
yara	AJAX_FileUpload_webshell	—	—
yara	Webshell_Insomnia	—	—
yara	HawkEye_PHP_Panel	—	—
yara	SoakSoak_Infected_Wordpress	—	—
yara	Pastebin_Webshell	—	—
yara	ASPXspy2	—	—
yara	Webshell_27_9_c66_c99	—	—
yara	Webshell_acid_AntiSecShell_3	—	—
yara	Webshell_c99_4	—	—
yara	Webshell_r57shell_2	—	—
yara	Webshell_27_9_acid_c99_locus7s	—	—
yara	Webshell_Backdoor_PHP_Agent_r57_mod_bizzz_shell_r57	—	—
yara	Webshell_c100	—	—
yara	Webshell_AcidPoison	—	—
yara	EquationGroup_wrap_telnet	—	—
yara	Webshell_acid_FaTaLisTiCz_Fx_fx_p0isoN_sh3ll_x0rg_byp4ss_256	—	—
yara	Webshell_Ayyildiz	—	—
yara	Webshell_zehir	—	—
yara	chinese_spam_echoer	—	—