Browse Detection Rules | TDL Marketplace

chronicle unknown yara-l

malware_rawpos

RawPOS malware

signature-base unknown yara

EldoS_RawDisk [yara]

EldoS Rawdisk Device Driver (Commercial raw disk access driver - used in Operation Shamoon 2.0)

yara unknown yara

EldoS_RawDisk [malware]

EldoS Rawdisk Device Driver (Commercial raw disk access driver - used in Operation Shamoon 2.0)

signature-base unknown yara

Trojan_Raw_Generic_4 [yara]

yara unknown yara

BlackHole_v2 [maldocs]

yara unknown yara

malicious_author [maldocs]

yara unknown yara

multiple_filtering [maldocs]

yara unknown yara

possible_exploit [maldocs]

yara unknown yara

suspicious_author [maldocs]

yara unknown yara

suspicious_creation [maldocs]

yara unknown yara

suspicious_creator [maldocs]

yara unknown yara

suspicious_embed [maldocs]

yara unknown yara

suspicious_js [maldocs]

yara unknown yara

suspicious_obfuscation [maldocs]

yara unknown yara

suspicious_producer [maldocs]

yara unknown yara

suspicious_title [maldocs]

yara unknown yara

suspicious_version [maldocs]

signature-base unknown yara

APT_Loader_Raw32_REDFLARE_1 [yara]

signature-base unknown yara

APT_Loader_Raw64_REDFLARE_1 [yara]

yara unknown yara

invalid_trailer_structure [maldocs]

yara unknown yara

network_smtp_raw [capabilities]

Communications smtp

yara unknown yara

suspicious_launch_action [maldocs]

yara unknown yara

XDP_embedded_PDF [maldocs]

yara unknown yara

network_tcp_socket [capabilities]

Communications over RAW socket

yara unknown yara

Trojan_Win32_Plakelog [malware]

Raw-input based keylogger

Browse Rules