Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,050 detections
Filters
Last updated
All Time
Detection languages
448
250
202
51
27
Contributors
410
155
118
94
48
Categories
628
580
246
179
128
Platforms
988
67
34
20
13
Products / Services
192
142
69
46
28
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
1,050
CVEs
1
IDS Classtypes
7
IDS Protocols
3
2
1
Yara rule that detects Dragon ransomware.
Yara rule that detects Makop ransomware.
Yara rule that detects Lolkek ransomware.
Yara rule that detects Outsider ransomware.
This YARA rule detects the Avaddon ransomware by identifying specific byte sequences related to its file finding, encryption, resource enumeration, and remote connection functionalities. The rule looks for a combination of these distinct patterns within a file, indicating the presence of Avaddon ransomware.
Yara rule that detects Avaddon ransomware.
Yara rule that detects Saturn ransomware.
This YARA rule detects the Gomer ransomware by identifying specific byte patterns associated with its file enumeration, file finding, and file encryption routines. The rule looks for distinct sequences of bytes that are characteristic of how Gomer ransomware operates on a Windows system, specifically in functions related to enumerating drives, finding files, and encrypting them.
This YARA rule detects the Sifreli ransomware by identifying specific byte patterns related to file finding, file encryption, and remote connection functionalities. The rule looks for a combination of these patterns within a file to classify it as Sifreli ransomware.
Yara rule that detects Gomer ransomware.
Yara rule that detects Sifreli ransomware.
This YARA rule detects the Balaclava ransomware based on specific byte patterns found in its executable. The patterns are associated with functions responsible for finding files, encrypting files, and identifying volumes, which are core functionalities of ransomware.
This YARA rule detects the Horsedeal ransomware by identifying specific byte patterns associated with its core functionalities. The rule looks for code segments responsible for enumerating system resources, searching for processes, discovering files on the system, and performing file encryption. The presence of all these patterns, along with a valid Windows executable header, indicates the presence of the Horsedeal ransomware.
Yara rule that detects Balaclava ransomware.
Yara rule that detects Horsedeal ransomware.
Yara rule that detects AwesomeScott ransomware.
Yara rule that detects BananaCrypt ransomware.
Yara rule that detects Termite ransomware.
This YARA rule detects the KawaiiLocker ransomware based on specific byte patterns found in its executable code. The rule looks for distinct sequences related to file searching, remote connections, and file encryption routines, indicating the presence and functionality of the KawaiiLocker ransomware.
Yara rule that detects JuicyLemon ransomware.
Yara rule that detects KawaiiLocker ransomware.
Page 41 of 50