Detection rules
Every rule tracked across all seven sources, newest updates first.
| Source | Rule | Status | Updated |
|---|---|---|---|
| yara | qti_certificate | — | — |
| yara | DownExecute_A | — | — |
| yara | CVE_2015_1674_CNGSYS | — | — |
| yara | Pandora | — | — |
| yara | Base64_encoded_Executable | — | — |
| yara | CredStealESY | — | — |
| yara | Typical_Malware_String_Transforms | — | — |
| yara | Invoke_mimikittenz | — | — |
| yara | LinuxAESDDoS | — | — |
| yara | LinuxBillGates | — | — |
| yara | LinuxElknot | — | — |
| yara | LinuxMrBlack | — | — |
| yara | LinuxTsunami | — | — |
| yara | rootkit | — | — |
| yara | exploit | — | — |
| yara | nkminer_monero | — | — |
| yara | NSFreeCode | — | — |
| yara | NSFreeStrings | — | — |
| yara | NSFree | — | — |
| yara | NaikonCode | — | — |
| yara | NaikonStrings | — | — |
| yara | Naikon | — | — |
| yara | Backdoor_Naikon_APT_Sample1 | — | — |
| yara | nAspyUpdateCode | — | — |
| yara | nAspyUpdateStrings | — | — |
| yara | nAspyUpdate | — | — |
| yara | NetpassStrings | — | — |
| yara | NetPass | — | — |
| yara | NetTravStrings | — | — |
| yara | NetTravExports | — | — |
| yara | NionSpy | — | — |
| yara | TROJAN_Notepad | — | — |
| yara | leverage_a | — | — |
| yara | Odinaff_swift | — | — |
| yara | OlyxCode | — | — |
| yara | OlyxStrings | — | — |
| yara | Olyx | — | — |
| yara | suspicious_packer_section | — | — |
| yara | PittyTiger | — | — |
| yara | PolishBankRAT_srservice_xorloop | — | — |