Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EquationGroup_envisioncollision	—	—
yara	EquationGroup_cmsex	—	—
yara	EquationGroup_exze	—	—
yara	EquationGroup_porkserver	—	—
yara	EquationGroup_DUL	—	—
yara	EquationGroup_slugger2	—	—
yara	EquationGroup_ebbisland	—	—
yara	EquationGroup_jackpop	—	—
yara	EquationGroup_parsescan	—	—
yara	EquationGroup_jscan	—	—
yara	EquationGroup_promptkill	—	—
yara	EquationGroup_epoxyresin_v1_0_0	—	—
yara	YayihStrings	—	—
yara	EquationGroup_estopmoonlit	—	—
yara	EquationGroup_envoytomato	—	—
yara	EquationGroup_smash	—	—
yara	EquationGroup_ratload	—	—
yara	EquationGroup_ys	—	—
yara	EquationGroup_ewok	—	—
yara	EquationGroup_xspy	—	—
yara	EquationGroup_estesfox	—	—
yara	EquationGroup_elatedmonkey_1_0_1_1	—	—
yara	EquationGroup_scanner	—	—
yara	EquationGroup__ftshell_ftshell_v3_10_3_0	—	—
yara	EquationGroup__scanner_scanner_v2_1_2	—	—
yara	EquationGroup__ghost_sparc_ghost_x86_3	—	—
yara	EquationGroup__pclean_v2_1_1_pclean_v2_1_1_4	—	—
yara	EquationGroup__jparsescan_parsescan_5	—	—
yara	EquationGroup__funnelout_v4_1_0_1	—	—
yara	EquationGroup__magicjack_v1_1_0_0_client	—	—
yara	EquationGroup__ftshell	—	—
yara	EquationGroup_store_linux_i386_v_3_3_0	—	—
yara	EquationGroup_morerats_client_genkey	—	—
yara	EquationGroup_cursetingle_2_0_1_2_mswin32_v_2_0_1	—	—
yara	EquationGroup_cursesleepy_mswin32_v_1_0_0	—	—
yara	EquationGroup_porkserver_v3_0_0	—	—
yara	EquationGroup_cursehelper_win2k_i686_v_2_2_0	—	—
yara	EquationGroup_morerats_client_addkey	—	—
yara	EquationGroup_watcher_solaris_i386_v_3_3_0	—	—
yara	EquationGroup_Toolset_Apr17_Banner_Implant9x	—	—

← Prev Next →