Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	APT_Kaspersky_Duqu2_SamsungPrint	—	—
yara	APT_Kaspersky_Duqu2_msi3_32	—	—
yara	EQGRP_noclient_3_0_5	—	—
yara	EQGRP_installdate	—	—
yara	EQGRP_teflondoor	—	—
yara	EQGRP_durablenapkin_solaris_2_0_1	—	—
yara	EQGRP_teflonhandle	—	—
yara	EQGRP_false	—	—
yara	EQGRP_bc_genpkt	—	—
yara	EQGRP_dn_1_0_2_1	—	—
yara	EQGRP_morel	—	—
yara	EQGRP_bc_parser	—	—
yara	EQGRP_1212	—	—
yara	EQGRP_1212_dehex	—	—
yara	install_get_persistent_filenames	—	—
yara	EQGRP_create_dns_injection	—	—
yara	EQGRP_screamingplow	—	—
yara	EQGRP_MixText	—	—
yara	EQGRP_tunnel_state_reader	—	—
yara	EQGRP_payload	—	—
yara	Equation_Kaspersky_GreyFishInstaller	—	—
yara	EQGRP_eligiblecandidate	—	—
yara	EQGRP_BUSURPER_2211_724	—	—
yara	EQGRP_networkProfiler_orderScans	—	—
yara	EQGRP_epicbanana_2_1_0_1	—	—
yara	EQGRP_sniffer_xml2pcap	—	—
yara	EQGRP_BananaAid	—	—
yara	EQGRP_bo	—	—
yara	EQGRP_SecondDate_2211	—	—
yara	EQGRP_config_jp1_UA	—	—
yara	EQGRP_userscript	—	—
yara	EQGRP_BBALL_M50FW08_2201	—	—
yara	EQGRP_BUSURPER_3001_724	—	—
yara	EQGRP_workit	—	—
yara	EQGRP_tinyhttp_setup	—	—
yara	EQGRP_shellcode	—	—
yara	EQGRP_EPBA	—	—
yara	EQGRP_BPIE	—	—
yara	EQGRP_jetplow_SH	—	—
yara	EQGRP_BBANJO	—	—