Detection Rule List

Rule Name Rule Type Technique Count Creation Date
YARA_Check_installed_software YARA 0 1 year, 8 months
YARA_disable_antivirus YARA 0 1 year, 8 months
YARA_DebuggerCheck_GlobalFlags YARA 1 1 year, 8 months
YARA_wiping_event YARA 0 1 year, 8 months
YARA_DebuggerCheck__RemoteAPI YARA 0 1 year, 8 months
YARA_Detect_AntiVMWithTemperature YARA 0 1 year, 8 months
YARA_QEMU_REGISTRY YARA 1 1 year, 8 months
YARA_Shamoon_Wiper YARA 1 1 year, 8 months
YARA_Detect_Possible_GetForegroundWindow_Evasion YARA 0 1 year, 8 months
YARA_disable_process YARA 1 1 year, 8 months
YARA_uac_bypass YARA 1 1 year, 8 months
YARA_Findcrypt YARA 2 1 year, 8 months
YARA_mac_detection YARA 0 1 year, 8 months
YARA_PACKER_antiunpack YARA 2 1 year, 8 months
YARA_VBOX_REGISTRY YARA 1 1 year, 8 months
YARA_SHADOW_COPY_DELETION YARA 1 1 year, 8 months
CAPA_debugger_api CAPA 1 1 year, 8 months
CAPA_debug_register CAPA 1 1 year, 8 months
CAPA_crash_eventlog CAPA 2 1 year, 8 months
CAPA_clear_log CAPA 1 1 year, 8 months
CAPA_timestomp CAPA 0 1 year, 8 months
CAPA_output_debug_string CAPA 1 1 year, 8 months
CAPA_QueryPerformanceCounter CAPA 1 1 year, 8 months
CAPA_device_pipe CAPA 0 1 year, 8 months
CAPA_detect_vm_process CAPA 2 1 year, 8 months
CAPA_stackstring_obf CAPA 0 1 year, 8 months
CAPA_mouse_cursor CAPA 1 1 year, 8 months
CAPA_ntglobalflag CAPA 1 1 year, 8 months
CAPA_debugged_flag CAPA 1 1 year, 8 months
CAPA_gettickcount CAPA 1 1 year, 8 months

Filter