Switch branches/tags
Nothing to show
Find file History
Florian Roth
Latest commit a62eeef Oct 10, 2018
Permalink
..
Failed to load latest commit information.
apt_agent_btz.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_alienspy_rat.yar False Positives May 25, 2017
apt_apt10.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt10_redleaves.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt12_malware.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt15.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt17_mal_sep17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt17_malware.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt19.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt28.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt29_grizzly_steppe.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt30_backspace.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt34.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_apt6_malware.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ar18_165a.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_backdoor_ssh_python.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_backspace.yar signatures > yara Feb 15, 2016
apt_beepservice.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_between-hk-and-burma.yar Adjusted SLServer Rule Apr 21, 2016
apt_bigbang.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_blackenergy.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_blackenergy_installer.yar signatures > yara Feb 15, 2016
apt_bluetermite_emdivi.yar signatures > yara Feb 15, 2016
apt_bronze_butler.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_buckeye.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_carbon_paper_turla.yar Carbon - Turla - rules by ESET Apr 1, 2017
apt_casper.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_cheshirecat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_cloudduke.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_cmstar.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_cn_pp_zerot.yar False Positive Reduction Sep 24, 2018
apt_codoso.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_coreimpact_agent.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_danti_svcmondr.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_darkcaracal.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_darkhydrus.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_deeppanda.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_derusbi.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_donotteam_ytyframework.yar Minor changes and adjustments Jun 21, 2018
apt_dragonfly.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_dubnium.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_duqu2.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_emissary.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_eqgrp.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_eqgrp_apr17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_eternalblue_non_wannacry.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_fakem_backdoor.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_fancybear_computrace_agent.yar Renamed Rule May 20, 2018
apt_fancybear_dnc.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_fancybear_osxagent.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_fidelis_phishing_plain_sight.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_fin7.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_fin7_backdoor.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_foudre.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_four_element_sword.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_freemilk.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_furtim.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_fvey_shadowbroker_dec16.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_fvey_shadowbroker_jan17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ghostdragon_gh0st_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_glassRAT.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_golddragon.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_greenbug.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_grizzlybear_uscert.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_hackingteam_rules.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ham_tofu_chches.yar False Positives Mar 28, 2017
apt_hatman.yar Disabled global rule to avoid the application in the concatenated rul… Dec 19, 2017
apt_hellsing_kaspersky.yar signatures > yara Feb 15, 2016
apt_hidden_cobra.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_hiddencobra_bankshot.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_hiddencobra_wiper.yar Hidden Cobra Wiper Mar 28, 2018
apt_hizor_rat.yar signatures > yara Feb 15, 2016
apt_hkdoor.yar Replaced non-ASCII character Oct 18, 2017
apt_icefog.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_indetectables_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_industroyer.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_inocnation.yar signatures > yara Feb 15, 2016
apt_irongate.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_irontiger.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_irontiger_trendmicro.yar Moved all rules that use ext vars to a new rule set Mar 12, 2018
apt_ism_rat.yar ISMRAT May 4, 2017
apt_kaspersky_duqu2.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_keyboys.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_keylogger_cn.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_khrat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_korplug_fast.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_kwampirs.yar Kwampirs malware Apr 24, 2018
apt_laudanum_webshells.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_lazarus_applejeus.yar Fixed error in RC4 keys list Aug 26, 2018
apt_lazarus_dec17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_lazarus_jun18.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_leviathan.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_lotusblossom_elise.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_magichound.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_microcin.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_middle_east_talosreport.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_miniasp.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_minidionis.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_mofang.yar FoxIT Mofang IOCs and YARA Rules Jun 15, 2016
apt_molerats_jul17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_monsoon.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_moonlightmaze.yar False Positive Reduction Dec 19, 2017
apt_ms_platinum.yara Microsoft Platinum YARA Rules Apr 27, 2016
apt_muddywater.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_naikon.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_nanocore_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ncsc_report_04_2018.yar Rule improvements Apr 11, 2018
apt_netwire_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_oilrig.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_oilrig_chafer_mar18.yar OilRig / Chafer YARA Rules Mar 23, 2018
apt_oilrig_oct17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_oilrig_rgdoor.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_olympic_destroyer.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_onhat_proxy.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_op_cleaver.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_op_cloudhopper.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_op_honeybee.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_passcv.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_passthehashtoolkit.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_plead_downloader.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_plugx.yar PlugX Signature by Jay DiMartino Aug 17, 2016
apt_poisonivy.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_poisonivy_gen3.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_poseidon_group.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_poshspy.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_prikormka.yar Bugfix in prikormka Rules Jun 17, 2016
apt_project_m.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_project_sauron.yara Project Sauron Aug 8, 2016
apt_project_sauron_extras.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_promethium_neodymium.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_putterpanda.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_quarkspwdump.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_quasar_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_quasar_vermin.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_rancor.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_reaver_sunorcal.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_rehashed_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_revenge_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_rocketkitten_keylogger.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_rokrat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ruag.yar RUAG APT Case YARA Signatures May 24, 2016
apt_rwmc_powershell_creddump.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sakula.yar Turla Rules - RUAG APT Jun 13, 2016
apt_saudi_aramco_phish.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_scanbox_deeppanda.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_scarcruft.yar Scracruft APT malware Feb 5, 2018
apt_seaduke_unit42.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sednit_delphidownloader.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_servantshell.yar Servant Shell Feb 7, 2017
apt_shadowpad.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_shamoon.yar signatures > yara Feb 15, 2016
apt_shamoon2.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_shellcrew_streamex.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_silence.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_skeletonkey.yar signatures > yara Feb 15, 2016
apt_slingshot.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_snaketurla_osx.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_snowglobe_babar.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sofacy.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sofacy_dec15.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sofacy_fysbis.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sofacy_hospitality.yar Missing "pe" module import in APT28 rule Oct 31, 2017
apt_sofacy_jun16.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sofacy_oct17_camp.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sofacy_xtunnel_bundestag.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sphinx_moth.yar signatures > yara Feb 15, 2016
apt_stonedrill.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_strider.yara Symantec Strider IOCs and YARA Rules Aug 10, 2016
apt_stuxnet.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_suckfly.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_sysscan.yar SysScan Rules by Kaspersky Jul 2, 2016
apt_ta17_293A.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ta17_318A.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ta17_318B.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ta18_074A.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ta18_149A.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_ta459.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_telebots.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_terracotta.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_terracotta_liudoor.yar signatures > yara Feb 15, 2016
apt_threatgroup_3390.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_thrip.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_tick_datper.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_tick_weaponized_usb.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_tidepool.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_tophat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_triton.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_turbo_campaign.yar Derusbi ELF / Win32 Turbo Campaign Feb 29, 2016
apt_turla.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_turla_gazer.yar APT Turla Gazer Sep 2, 2017
apt_turla_mosquito.yar False Positive Reduction Oct 10, 2018
apt_turla_neuron.yar False Positive Reduction May 20, 2018
apt_uboat_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_unit78020_malware.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_uscert_ta17-1117a.yar US CERT Alert TA17-117A https://goo.gl/fZhL9H Apr 28, 2017
apt_venom_linux_rootkit.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_volatile_cedar.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_vpnfilter.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_waterbear.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_waterbug.yar signatures > yara Feb 15, 2016
apt_webmonitor_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_webshell_chinachopper.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_wildneutron.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_wilted_tulip.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_win_plugx.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_winnti.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_winnti_burning_umbrella.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_winnti_hdroot.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_winnti_ms_report_201701.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_woolengoldfish.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_xrat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
apt_zxshell.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
cn_pentestset_scripts.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
cn_pentestset_tools.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
cn_pentestset_webshells.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_andromeda_jun17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_antifw_installrex.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_bad_patch.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_badrabbit.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_bernhard_pos.yar signatures > yara Feb 15, 2016
crime_bluenoroff_pos.yar BluenoroffPoS DLL Jun 8, 2018
crime_buzus_softpulse.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_cmstar.yar signatures > yara Feb 15, 2016
crime_cn_campaign_njrat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_cn_group_btc.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_cobaltgang.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_corkow_dll.yar Missing PE module imports, minor changes Oct 11, 2017
crime_credstealer_generic.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_cryptowall_svg.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_dexter_trojan.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_dridex_xml.yar signatures > yara Feb 15, 2016
crime_enfal.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_envrial.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_eternalrocks.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_fareit.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_fireball.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_floxif_flystudio.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_goldeneye.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_hermes_ransom.yar FEIB Report - by BEA systems Oct 17, 2017
crime_kasper_oct17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_kins_dropper.yar signatures > yara Feb 15, 2016
crime_kr_malware.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_kraken_bot1.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_kriskynote.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_locky.yar Locky Ransomware Feb 17, 2016
crime_loki_bot.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_mal_grandcrab.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_malumpos.yar Moved all rules that use ext vars to a new rule set Mar 12, 2018
crime_malware_generic.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_malware_set_oct16.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_mikey_trojan.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_mirai.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_mywscript_dropper.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_nkminer.yar North Korean Crypto Miner (by Chris Doman and me) Jan 10, 2018
crime_nopetya_jun17.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_ole_loadswf_cve_2018_4878.yar OLE LoadSwf CVE 2018-4878 Feb 5, 2018
crime_phish_gina_dec15.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_rombertik_carbongrabber.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_shifu_trojan.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_snarasite.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_teledoor.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_upatre_oct15.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_wannacry.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
crime_xbash.yar Xbash Sep 20, 2018
crime_zeus_panda.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exp_drivecrypt.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2014_4076.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2015_1674.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2015_1701.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2015_2426.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2015_2545.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2015_5119.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2017_11882.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2017_8759.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2017_9800.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
exploit_cve_2018_0802.yar YARA rule for CVE-2018-0802 by Rich Warren Jan 14, 2018
exploit_rtf_ole2link.yar Moved all rules that use ext vars to a new rule set Mar 12, 2018
exploit_uac_elevators.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_ace_with_exe.yar signatures > yara Feb 15, 2016
gen_armitage.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_b374k_extra.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_bad_pdf.yar Updated BadPDF rule May 29, 2018
gen_case_anomalies.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_cert_payloads.yar False Positive Reduction Aug 21, 2018
gen_chaos_payload.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_cn_hacktool_scripts.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_cn_hacktools.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_cn_webshells.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_crimson_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_crunchrat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_dde_in_office_docs.yar Disabled DDEAUTO rule that slowed down scanning Feb 3, 2018
gen_deviceguard_evasion.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_dropper_pdb.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_empire.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_enigma_protector.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_exploit_cve_2017_10271_weblogic.yar update for VT uploads that include the POST header Mar 28, 2018
gen_faked_versions.yar Moved all rules that use ext vars to a new rule set Mar 12, 2018
gen_floxif.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_gen_cactustorch.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_gpp_cpassword.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_hawkeye.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_hta_anomalies.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_impacket_tools.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_invoke_mimikatz.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_invoke_psimage.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_invoke_thehash.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_javascript_powershell.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_kerberoast.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_kirbi_mimkatz.yar Bugfixes and False Positive Reduction Jul 20, 2017
gen_loaders.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_mal_link.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_mal_scripts.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_malware_set_qa.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_merlin_agent.yar Typo in Merlin rule Dec 29, 2017
gen_metasploit_loader_rsmudge.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_metasploit_payloads.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_mimikittenz.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_mimipenguin.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_nopowershell.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_osx_backdoor_bella.yar OSX malware by @JohnLaTwC Feb 24, 2018
gen_osx_evilosx.yar OSX malware by @JohnLaTwC Feb 24, 2018
gen_osx_pyagent_persistence.yar OSX malware by @JohnLaTwC Feb 24, 2018
gen_p0wnshell.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_pirpi.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_powerkatz.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_powershdll.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_powershell_empire.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_powershell_invocation.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_powershell_obfuscation.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_powershell_suite.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_powershell_susp.yar False Positive Reduction Sep 11, 2018
gen_powershell_toolkit.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_powersploit_dropper.yar Hacktool PowerSploit Dropper Jun 24, 2018
gen_ps_empire_eval.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_ps_osiris.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_pua.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_pupy_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_python_encoded_adware yara rule for encoded python payloads for adware Mar 7, 2018
gen_python_reverse_shell.yara Minor changes: performance reasons, reference, hashes split up Mar 5, 2018
gen_rats_malwareconfig.yar False Positive Reduction Jul 16, 2018
gen_recon_keywords.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_redsails.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_regsrv32_issue.yar Moved all rules that use ext vars to a new rule set Mar 12, 2018
gen_rottenpotato.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_sfx_with_microsoft_copyright.yar Fix: tightened the SFX rule Sep 17, 2018
gen_sharpcat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_susp_cmd_var_expansion.yar Suspicious CMD Var expansion in Office Docs Sep 28, 2018
gen_susp_lnk_files.yar Suspicious LNK files Sep 19, 2018
gen_susp_office_dropper.yar Generic rule: Suspicious office dropper strings Sep 13, 2018
gen_susp_sfx.yar Suspicious SFX running wscript.exe Sep 28, 2018
gen_susp_strings_in_ole.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_suspicious_strings.yar Suspicious IEX PowerShell Combo Oct 10, 2018
gen_sysinternals_anomaly.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_tempracer.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_thumbs_cloaking.yar Moved all rules that use ext vars to a new rule set Mar 12, 2018
gen_transformed_strings.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_tscookie_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_unicorn_obfuscated_powershell.yar Performance optimization Apr 3, 2018
gen_unspecified_malware.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_url_to_local_exe.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_win_privesc.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_winpayloads.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_winshells.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_wmi_implant.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_xtreme_rat.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
gen_ysoserial_payloads.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
general_cloaking.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
general_officemacros.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
generic_anomalies.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
generic_cryptors.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
generic_dumps.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
generic_exe2hex_payload.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
pua_cryptocoin_miner.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
pua_xmrig_monero_miner.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
pup_lightftp.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
spy_equation_fiveeyes.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
spy_querty_fiveeyes.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
spy_regin_fiveeyes.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
thor-hacktools.yar BlackBone Driver Injector Sep 11, 2018
thor-webshells.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
thor_inverse_matches.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018
threat_lenovo_superfish.yar signatures > yara Feb 15, 2016
yara_mixed_ext_vars.yar License notice on my own rules, removed rules with unclear/problemati… Aug 26, 2018