Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara FSO_s_remview_2 — —
yara HYTop2006_rar_Folder_2006X — —
yara FSO_s_phvayv_2 — —
yara elmaliseker — —
yara shelltools_g0t_root_resolve — —
yara FSO_s_RemExp — —
yara FSO_s_tool — —
yara FeliksPack3___PHP_Shells_2005 — —
yara byloader — —
yara shelltools_g0t_root_Fport — —
yara BackDooR__fr_ — —
yara FSO_s_ntdaddy — —
yara nstview_nstview — —
yara HYTop_DevPack_upload — —
yara PasswordReminder — —
yara Pack_InjectT — —
yara FSO_s_RemExp_2 — —
yara FSO_s_c99 — —
yara rknt_zip_Folder_RkNT — —
yara dbgntboot — —
yara PHP_shell — —
yara hxdef100 — —
yara rdrbs100 — —
yara Mithril_Mithril — —
yara hxdef100_2 — —
yara Release_dllTest — —
yara webadmin — —
yara commands — —
yara hkdoordll — —
yara r57shell_2 — —
yara Mithril_v1_45_dllTest — —
yara dbgiis6cli — —
yara remview_2003_04_22 — —
yara FSO_s_test — —
yara Debug_cress — —
yara webshell — —
yara FSO_s_EFSO_2 — —
yara thelast_index3 — —
yara adjustcr — —
yara FeliksPack3___PHP_Shells_xIShell — —