Browse Rules

Search and filter across all detection sources

197 rules

reversinglabs unknown yara

Linux_Virus_Vit [virus]

Yara rule that detects Vit virus.

reversinglabs unknown yara

Win32_Virus_Awfull [virus]

Yara rule that detects Awfull virus.

reversinglabs unknown yara

Win32_Virus_Cmay [virus]

Yara rule that detects Cmay virus.

reversinglabs unknown yara

Win32_Virus_DeadCode [virus]

Yara rule that detects DeadCode virus.

reversinglabs unknown yara

Win32_Virus_Elerad [virus]

Yara rule that detects Elerad virus.

reversinglabs unknown yara

Win32_Virus_Greenp [virus]

Yara rule that detects Greenp virus.

reversinglabs unknown yara

Win32_Virus_Mocket [virus]

Yara rule that detects Mocket virus.

reversinglabs unknown yara

Win32_Virus_Negt [virus]

Yara rule that detects Negt virus.

sagan high other

[Barracuda] WAF Virus Scan - Virus Found

[Barracuda] WAF Virus Scan - Virus Found

wazuh informational xml

VirusTotal: Alert - No records in VirusTotal database

VirusTotal: Alert - No records in VirusTotal database

wazuh high xml

VirusTotal: Alert - $(virustotal.source.file) - $(virustotal.positives) engines detected this file

VirusTotal: Alert - $(virustotal.source.file) - $(virustotal.positives) engines detected this file

wazuh informational xml

VirusTotal: Alert - $(virustotal.source.file) - No positives found

VirusTotal: Alert - $(virustotal.source.file) - No positives found

signature-base unknown yara

RAT_VirusRat [yara]

Detects VirusRAT

wazuh informational xml

VirusTotal integration messages.

VirusTotal integration messages.

sentinel informational kql

Mimecast Secure Email Gateway - Virus

Detect threat for virus from mail receipt virus event

sentinel informational kql

Mimecast Secure Email Gateway - Virus

'Detect threat for virus from mail receipt virus event.'

yara unknown yara

VirutFileInfector [malware]

Virut (unknown version) fileinfector detection

sagan low other

clamd anti-virus detected

clamd anti-virus detected

sagan unknown other

[TRENDMICRO-SERVERPROTECT] Virus Detected

[TRENDMICRO-SERVERPROTECT] Virus Detected

sagan high other

[Barracuda] WAF Virus Found

[Barracuda] WAF Virus Found

sagan informational other

[FORTINET] Virus Command Blocked

[FORTINET] Virus Command Blocked

sagan informational other

[FORTINET] Virus Command Blocked

[FORTINET] Virus Command Blocked

sagan informational other

[FORTINET] Virus Command Blocked

[FORTINET] Virus Command Blocked

sagan medium other

[PALO-ALTO] Virus Detected

[PALO-ALTO] Virus Detected

sagan medium other

[TRENDMICRO] Virus Logs Detected

[TRENDMICRO] Virus Logs Detected