Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	Hacktool_This_Cruft	—	—
yara	APT_Project_Sauron_Custom_M1	—	—
yara	APT_Project_Sauron_Custom_M2	—	—
yara	APT_Project_Sauron_Custom_M3	—	—
yara	APT_Project_Sauron_Custom_M4	—	—
yara	APT_Project_Sauron_Custom_M6	—	—
yara	APT_Project_Sauron_Custom_M7	—	—
yara	Scieron	—	—
yara	SeaDuke_Sample	—	—
yara	susp_file_enumerator_with_encrypted_resource_101	—	—
yara	StoneDrill_main_sub	—	—
yara	SNOWGLOBE_Babar_Malware	—	—
yara	apt_sofacy_xtunnel	—	—
yara	RUAG_Bot_Config_File	—	—
yara	Sofacy_Bundestag_Winexe	—	—
yara	Sofacy_Bundestag_Mal2	—	—
yara	Sofacy_Bundestag_Mal3	—	—
yara	Sofacy_Bundestag_Batch	—	—
yara	Sofacy_Fybis_ELF_Backdoor_Gen1	—	—
yara	Sphinx_Moth_iastor32	—	—
yara	Unit78020_Malware_Gen2	—	—
yara	Unit78020_Malware_Gen3	—	—
yara	APT_Uppercut	—	—
yara	WaterBug_wipbot_2013_core_PDF	—	—
yara	WaterBug_wipbot_2013_dll	—	—
yara	WaterBug_wipbot_2013_core	—	—
yara	WaterBug_turla_dropper	—	—
yara	WaterBug_fa_malware	—	—
yara	WaterBug_sav	—	—
yara	WildNeutron_Sample_1	—	—
yara	WildNeutron_Sample_2	—	—
yara	WoolenGoldfish_Sample_1	—	—
yara	WildNeutron_Sample_3	—	—
yara	WildNeutron_Sample_4	—	—
yara	WildNeutron_Sample_5	—	—
yara	WildNeutron_Sample_6	—	—
yara	WildNeutron_Sample_7	—	—
yara	WildNeutron_Sample_8	—	—
yara	WildNeutron_Sample_9	—	—
yara	WildNeutron_Sample_10	—	—