Detection rules
Every rule tracked across all seven sources, newest updates first.
| Source | Rule | Status | Updated |
|---|---|---|---|
| yara | SamSam_Ransomware_Latest | — | — |
| yara | Ransom_Satana | — | — |
| yara | Ransom_Satana_Dropper | — | — |
| yara | unpacked_shiva_ransomware | — | — |
| yara | sigma_ransomware | — | — |
| yara | stampado_overlay | — | — |
| yara | TeslaCrypt | — | — |
| yara | Win32Toxic | — | — |
| yara | screenlocker_acroware | — | — |
| yara | jeff_dev_ransomware | — | — |
| yara | locdoor_ransomware | — | — |
| yara | DarkComet_2 | — | — |
| yara | screenlocker_5h311_1nj3c706 | — | — |
| yara | shrug2_ransomware | — | — |
| yara | termite_ransomware | — | — |
| yara | Adwind_JAR_PACKA | — | — |
| yara | Adwind_JAR_PACKB | — | — |
| yara | crime_win_rat_AlienSpy | — | — |
| yara | win_asyncrat_j1 | — | — |
| yara | BlackShades_3 | — | — |
| yara | BlackShades2 | — | — |
| yara | BlackShades_4 | — | — |
| yara | BlackShades | — | — |
| yara | BlackShades_25052015 | — | — |
| yara | DarkComet_3 | — | — |
| yara | Bolonyokte | — | — |
| yara | Bozok | — | — |
| yara | Cerberus | — | — |
| yara | Crimson | — | — |
| yara | CrossRAT | — | — |
| yara | CyberGate | — | — |
| yara | DarkComet_1 | — | — |
| yara | DarkComet_5 | — | — |
| yara | FlyingKitten | — | — |
| yara | CSIT_14003_03 | — | — |
| yara | APT_WIN_Gh0st_ver | — | — |
| yara | Gh0st | — | — |
| yara | gh0st | — | — |
| yara | gholeeV1 | — | — |
| yara | gholeeV2 | — | — |