Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	APT1_WEBC2_YAHOO	—	—
yara	APT1_MAPIGET	—	—
yara	md5_cdn_js_link_js	—	—
yara	r4_wiper_2	—	—
yara	visbot	—	—
yara	thetech_org_js	—	—
yara	APT1_LIGHTBOLT	—	—
yara	remsec_executable_blob_parser	—	—
yara	remsec_encrypted_api	—	—
yara	Mirai_4	—	—
yara	eval_base64_decode_a	—	—
yara	pos_jack	—	—
yara	Mirai_Dwnl	—	—
yara	onepage_or_checkout	—	—
yara	NetTraveler	—	—
yara	mag_php_js	—	—
yara	APT_Hikit_msrv	—	—
yara	RegSubDat	—	—
yara	sinlesspleasure_com	—	—
yara	obf_base64_decode	—	—
yara	md5_f797dd5d8e13fe5c8898dbe3beb3cc5b	—	—
yara	amasty_biz_js	—	—
yara	rar_with_js	—	—
yara	KURTON_APT1	—	—
yara	RUAG_Cobra_Malware	—	—
yara	MACROMAIL_APT1	—	—
yara	RooterCode	—	—
yara	TrojanCookies_CCREW	—	—
yara	GEN_CCREW1	—	—
yara	Elise	—	—
yara	EclipseSunCloudRAT	—	—
yara	md5_4aa900ddd4f1848a15c61a9b7acd5035	—	—
yara	MoonProject	—	—
yara	ccrewDownloader1	—	—
yara	ccrewSSLBack1	—	—
yara	amasty_biz	—	—
yara	remsec_packer_B	—	—
yara	ccrewDownloader2	—	—
yara	ccrewMiniasp	—	—
yara	SynFlooder	—	—