Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EquationGroup_ratload	—	—
yara	EquationGroup_ys	—	—
yara	EquationGroup_ewok	—	—
yara	EquationGroup_xspy	—	—
yara	EquationGroup_estesfox	—	—
yara	EquationGroup_elatedmonkey_1_0_1_1	—	—
yara	EquationGroup_scanner	—	—
yara	EquationGroup__ftshell_ftshell_v3_10_3_0	—	—
yara	EquationGroup__scanner_scanner_v2_1_2	—	—
yara	EquationGroup__ghost_sparc_ghost_x86_3	—	—
yara	EquationGroup__pclean_v2_1_1_pclean_v2_1_1_4	—	—
yara	EquationGroup__jparsescan_parsescan_5	—	—
yara	EquationGroup__funnelout_v4_1_0_1	—	—
yara	EquationGroup__magicjack_v1_1_0_0_client	—	—
yara	EquationGroup__ftshell	—	—
yara	EquationGroup_store_linux_i386_v_3_3_0	—	—
yara	EquationGroup_morerats_client_genkey	—	—
yara	EquationGroup_cursetingle_2_0_1_2_mswin32_v_2_0_1	—	—
yara	EquationGroup_cursesleepy_mswin32_v_1_0_0	—	—
yara	EquationGroup_porkserver_v3_0_0	—	—
yara	EquationGroup_cursehelper_win2k_i686_v_2_2_0	—	—
yara	EquationGroup_morerats_client_addkey	—	—
yara	EquationGroup_watcher_solaris_i386_v_3_3_0	—	—
yara	EquationGroup_noclient_3_3_2	—	—
yara	EquationGroup_curseflower_mswin32_v_1_0_0	—	—
yara	EquationGroup_tmpwatch	—	—
yara	EquationGroup_orleans_stride_sunos5_9_v_2_4_0	—	—
yara	EquationGroup_morerats_client_noprep	—	—
yara	EquationGroup_cursezinger_linuxrh7_3_v_2_0_0	—	—
yara	EquationGroup_seconddate_ImplantStandalone_3_0_3	—	—
yara	EquationGroup_gr_dev_bin_now	—	—
yara	EquationGroup_gr_dev_bin_post	—	—
yara	EquationGroup_curseyo_win2k_v_1_0_0	—	—
yara	EquationGroup_gr	—	—
yara	EquationGroup_curseroot_win2k_v_2_1_0	—	—
yara	EquationGroup_cursewham_curserazor_cursezinger_curseroot_win2k	—	—
yara	EquationGroup_watcher_linux_i386_v_3_3_0	—	—
yara	EquationGroup_charm_saver_win2k_v_2_0_0	—	—
yara	EquationGroup_cursehappy_win2k_v_6_1_0	—	—
yara	EquationGroup_morerats_client_Store	—	—

← Prev Next →