Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara phpspy_2005_full — —
yara c99shell — —
yara FSO_s_ajan — —
yara ZXshell2_0_rar_Folder_zxrecv — —
yara FSO_s_phpinj_2 — —
yara screencap — —
yara xssshell_save — —
yara PHP_Shell_v1_7 — —
yara regshell — —
yara shelltools_g0t_root_HideRun — —
yara connector — —
yara Debug_dllTest_2 — —
yara fmlibraryv3 — —
yara peek_a_boo — —
yara Mithril_dllTest — —
yara by064cli — —
yara EditServer_Webshell_2 — —
yara xssshell_default — —
yara PHP_sh — —
yara FSO_s_phpinj — —
yara FeliksPack3___PHP_Shells_usr — —
yara xssshell — —
yara HYTop_AppPack_2005 — —
yara FeliksPack3___PHP_Shells_xIShell — —
yara adjustcr — —
yara thelast_index3 — —
yara FSO_s_EFSO_2 — —
yara webshell — —
yara Debug_cress — —
yara FSO_s_test — —
yara remview_2003_04_22 — —
yara dbgiis6cli — —
yara Mithril_v1_45_dllTest — —
yara r57shell_2 — —
yara hkdoordll — —
yara commands — —
yara webadmin — —
yara Release_dllTest — —
yara hxdef100_2 — —
yara Mithril_Mithril — —