Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	IronTiger_PlugX_FastProxy	—	—
yara	MongalCode	—	—
yara	IronTiger_PlugX_DosEmulator	—	—
yara	IronTiger_NBDDos_Gh0stvariant_dropper	—	—
yara	IronTiger_HTTP_SOCKS_Proxy_soexe	—	—
yara	IronTiger_HTTPBrowser_Dropper	—	—
yara	IronTiger_GTalk_Trojan	—	—
yara	IronTiger_Gh0stRAT_variant	—	—
yara	IronTiger_GetUserInfo	—	—
yara	IronTiger_GetPassword_x64	—	—
yara	IronTiger_EFH3_encoder	—	—
yara	IronTiger_dnstunnel	—	—
yara	IronTiger_dllshellexc2010	—	—
yara	IronTiger_ChangePort_Toolkit_ChangePortExe	—	—
yara	IronTiger_ChangePort_Toolkit_driversinstall	—	—
yara	IronTiger_ASPXSpy	—	—
yara	Industroyer_Malware_5	—	—
yara	Industroyer_Malware_4	—	—
yara	Industroyer_Portscan_3_Output	—	—
yara	Industroyer_Portscan_3	—	—
yara	Industroyer_Malware_2	—	—
yara	Industroyer_Malware_1	—	—
yara	r4_wiper_1	—	—
yara	NK_SSL_PROXY	—	—
yara	Unauthorized_Proxy_Server_RAT	—	—
yara	Malware_Updater	—	—
yara	apt_hiddencobra_urlbuilder	—	—
yara	Network_Win7AMD64	—	—
yara	EquationDrug_NetworkSniffer2	—	—
yara	EquationDrug_HDDSSD_Op	—	—
yara	EquationDrug_CompatLayer_UnilayDLL	—	—
yara	EquationDrug_NetworkSniffer1	—	—
yara	Equation_Kaspersky_SuspiciousString	—	—
yara	Equation_Kaspersky_TripleFantasy_Loader	—	—
yara	msvcrt_WinXPx86	—	—
yara	Equation_Kaspersky_EOP_Package	—	—
yara	Equation_Kaspersky_HDD_reprogramming_module	—	—
yara	Equation_Kaspersky_FannyWorm	—	—
yara	Equation_Kaspersky_EquationLaserInstaller	—	—
yara	Equation_Kaspersky_EquationDrugInstaller	—	—