Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	LinuxHacktool_eyes_screen	—	—
yara	CN_Portscan	—	—
yara	LinuxHacktool_eyes_pscan2_2	—	—
yara	LinuxHacktool_eyes_mass	—	—
yara	LinuxHacktool_eyes_a	—	—
yara	LinuxHacktool_eyes_pscan2	—	—
yara	LinuxHacktool_eyes_scanssh	—	—
yara	CN_Toolset_NTscan_PipeCmd	—	—
yara	Ammyy_Admin_AA_v3	—	—
yara	Payload_Exe2Hex	—	—
yara	wineggdrop	—	—
yara	VSSown_VBS	—	—
yara	AppInitHook	—	—
yara	Mimikatz_Logfile	—	—
yara	PHP_Shell_php_php	—	—
yara	Ayyildiz_Tim___AYT__Shell_v_2_1_Biz_html	—	—
yara	EFSO_2_asp	—	—
yara	lamashell_php	—	—
yara	Ajax_PHP_Command_Shell_php	—	—
yara	JspWebshell_1_2_jsp	—	—
yara	Sincap_php_php	—	—
yara	Test_php_php	—	—
yara	Phyton_Shell_py	—	—
yara	mysql_tool_php_php	—	—
yara	Zehir_4_asp	—	—
yara	sh_php_php	—	—
yara	phpbackdoor15_php	—	—
yara	sql_php_php	—	—
yara	cgi_python_py	—	—
yara	ru24_post_sh_php_php	—	—
yara	DTool_Pro_php	—	—
yara	telnetd_pl	—	—
yara	php_include_w_shell_php	—	—
yara	Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php	—	—
yara	PHANTASMA_php	—	—
yara	shell_php_php	—	—
yara	telnet_cgi	—	—
yara	ironshell_php	—	—
yara	backdoorfr_php	—	—
yara	aspydrv_asp	—	—