Detection rules
Every rule tracked across all seven sources, newest updates first.
| Source | Rule | Status | Updated |
|---|---|---|---|
| yara | EditKeyLogReadMe | — | — |
| yara | ByPassFireWall_zip_Folder_Ie | — | — |
| yara | sig_238_filespy | — | — |
| yara | PassSniffer | — | — |
| yara | aspbackdoor_EDIR | — | — |
| yara | ASPack_Chinese | — | — |
| yara | XYZCmd_zip_Folder_XYZCmd | — | — |
| yara | sig_238_webget | — | — |
| yara | snifferport | — | — |
| yara | sig_238_TELNET | — | — |
| yara | sig_238_token | — | — |
| yara | sig_238_letmein | — | — |