Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	apt_equation_equationlaser_runtimeclasses	—	—
yara	apt_equation_cryptotable	—	—
yara	Equation_Kaspersky_TripleFantasy_1	—	—
yara	Equation_Kaspersky_DoubleFantasy_1	—	—
yara	Equation_Kaspersky_GROK_Keylogger	—	—
yara	Equation_Kaspersky_EquationDrugInstaller	—	—
yara	Equation_Kaspersky_EquationLaserInstaller	—	—
yara	Equation_Kaspersky_FannyWorm	—	—
yara	Equation_Kaspersky_HDD_reprogramming_module	—	—
yara	Equation_Kaspersky_EOP_Package	—	—
yara	msvcrt_WinXPx86	—	—
yara	Equation_Kaspersky_TripleFantasy_Loader	—	—
yara	Equation_Kaspersky_SuspiciousString	—	—
yara	EquationDrug_NetworkSniffer1	—	—
yara	EquationDrug_CompatLayer_UnilayDLL	—	—
yara	EquationDrug_HDDSSD_Op	—	—
yara	EquationDrug_NetworkSniffer2	—	—
yara	Network_Win7AMD64	—	—
yara	IMPLANT_2_v15	—	—
yara	IMPLANT_2_v16	—	—
yara	IMPLANT_2_v17	—	—
yara	IMPLANT_2_v18	—	—
yara	IMPLANT_2_v19	—	—
yara	IMPLANT_4_v3_AlternativeRule	—	—
yara	IMPLANT_2_v20	—	—
yara	IMPLANT_3_v1	—	—
yara	IMPLANT_3_v2	—	—
yara	IMPLANT_3_v3	—	—
yara	IMPLANT_4_v1	—	—
yara	IMPLANT_4_v2	—	—
yara	MALW_trickbot_bankBot	—	—
yara	IMPLANT_4_v4	—	—
yara	IMPLANT_4_v5	—	—
yara	IMPLANT_4_v7	—	—
yara	IMPLANT_4_v8	—	—
yara	IMPLANT_4_v9	—	—
yara	Backdoor_APT_Mongal	—	—
yara	IMPLANT_4_v10	—	—
yara	IMPLANT_4_v11	—	—
yara	IMPLANT_4_v13	—	—