Commits · 89499f9075ffabd14754cab8d4e208398fabb1fe · fact-depend / rules · GitLab

13 Jan, 2016 3 commits
- Update and rename derkziel_stealer to malware/Derkziel_Stealer.yar · 89499f90
  mmorenog authored Jan 13, 2016
  
  89499f90 Browse Files
- Merge pull request #76 from seifreed/patch-5 · 97fa54f8
```
Create derkziel_stealer
```
  mmorenog authored Jan 13, 2016
  97fa54f8 Browse Files
- Create derkziel_stealer · 1a08b908
  Marc Rivero López authored Jan 13, 2016
  
  1a08b908 Browse Files
08 Jan, 2016 2 commits
- Create APT_Emissary.yar · ca34ae65
  mmorenog authored Jan 08, 2016
  
  ca34ae65 Browse Files
- Update and rename BlackEnergy.yar to APT_Blackenergy.yar · 582fdc2f
  mmorenog authored Jan 08, 2016
  
  582fdc2f Browse Files
07 Jan, 2016 1 commit
- Merge pull request #75 from apolkosnik/patch-1 · 34d88a57
```
Update rovnix to replace M$ word quotes with ASCII quotation marks
```
  mmorenog authored Jan 07, 2016
  34d88a57 Browse Files
06 Jan, 2016 1 commit
- Update rovnix to replace M$ word quotes with ASCII quotation marks · 9b002f17
  Adam Polkosnik [fun] authored Jan 06, 2016
  
  9b002f17 Browse Files
04 Jan, 2016 3 commits
- Create Havex_Memdump.yar · 29ffb307
  mmorenog authored Jan 04, 2016
  
  29ffb307 Browse Files
- Merge pull request #73 from 0pc0deFR/master · d110dd93
```
Add embedded executable detection
```
  mmorenog authored Jan 04, 2016
  d110dd93 Browse Files
- Merge pull request #72 from seifreed/patch-4 · 3db1e0b5
```
Update antidebug.yar
```
  mmorenog authored Jan 04, 2016
  3db1e0b5 Browse Files
31 Dec, 2015 1 commit
- Add embedded executable detection · 824eedfb
```
Rule created by Florian Roth
```
  Kevin Falcoz authored Dec 31, 2015
  824eedfb Browse Files
28 Dec, 2015 1 commit
- Update antidebug.yar · 93943ddb
  Marc Rivero López authored Dec 28, 2015
  
  93943ddb Browse Files
25 Dec, 2015 2 commits
- Create Mailers.yar · f39ec3c7
  mmorenog authored Dec 25, 2015
  
  f39ec3c7 Browse Files
- Create EMAIL_Cryptowall.yar · b1a176d2
  mmorenog authored Dec 25, 2015
  
  b1a176d2 Browse Files
21 Dec, 2015 1 commit
- Create sqlite.yar · 29cd450f
  mmorenog authored Dec 21, 2015
  
  29cd450f Browse Files
18 Dec, 2015 8 commits
- Rename Beef_pretty_theft.yar to EXPERIMENTAL_Beef_pretty_theft.yar · c644eace
  mmorenog authored Dec 18, 2015
  
  c644eace Browse Files
- Rename Beef_Hooked.yar to EXPERIMENTAL_Beef_Hooked.yar · ed46af68
  mmorenog authored Dec 18, 2015
  
  ed46af68 Browse Files
- Create APT_Sphinx_Moth.yar · 7e61fed4
  mmorenog authored Dec 18, 2015
  
  7e61fed4 Browse Files
- Update and rename Derusbi.yar to APT_Derusbi.yar · b86b4bf9
  mmorenog authored Dec 18, 2015
  
  b86b4bf9 Browse Files
- Create Beef_pretty_theft.yar · fe781042
  mmorenog authored Dec 18, 2015
  
  fe781042 Browse Files
- Create Beef_Hooked.yar · 60263dc1
  mmorenog authored Dec 18, 2015
  
  60263dc1 Browse Files
- Update inocnation.yar · 96cac538
  mmorenog authored Dec 18, 2015
  
  96cac538 Browse Files
- Merge pull request #70 from seifreed/patch-3 · c06e9a58
```
Create inocnation.yar
```
  mmorenog authored Dec 18, 2015
  c06e9a58 Browse Files
16 Dec, 2015 1 commit
- Create inocnation.yar · cbca3c7c
  Marc Rivero López authored Dec 17, 2015
  
  cbca3c7c Browse Files
15 Dec, 2015 2 commits
- change file extensions to .yar · 67a40033
  jovimon authored Dec 15, 2015
  
  67a40033 Browse Files
- Merge pull request #69 from seifreed/patch-2 · 617113ae
```
Create rovnix_downloader_sinkhole_check
```
  jovimon authored Dec 15, 2015
  617113ae Browse Files
10 Dec, 2015 1 commit
- Create rovnix_downloader_sinkhole_check · d4d552de
  Marc Rivero López authored Dec 10, 2015
  
  d4d552de Browse Files
03 Dec, 2015 1 commit
- Create DRIDEX_phish_gina_dec15.yar · 7d51ad5c
  mmorenog authored Dec 03, 2015
  
  7d51ad5c Browse Files
02 Dec, 2015 4 commits
- Fixed meta errors · ad7b9d82
```
Fixed meta errors
```
  j0sm1 authored Dec 02, 2015
  ad7b9d82 Browse Files
- Update ponmocup_plugin_memory.yar · aa6b93cf
  mmorenog authored Dec 02, 2015
  
  aa6b93cf Browse Files
- Merge pull request #68 from seifreed/patch-1 · 0c17a45a
```
Create ponmocup_plugin_memory.yar
```
  mmorenog authored Dec 02, 2015
  0c17a45a Browse Files
- Create ponmocup_plugin_memory.yar · 4af188f2
```
Ponmocup rule from FOX-IT
```
  Marc Rivero López authored Dec 02, 2015
  4af188f2 Browse Files
30 Nov, 2015 2 commits
- Merge pull request #67 from plutec/master · 73bf2265
```
Some rules to detect features in emails
```
  jovimon authored Nov 30, 2015
  73bf2265 Browse Files
- Some rules to detect features in emails · 65a48377
  Antonio S authored Nov 30, 2015
  
  65a48377 Browse Files
26 Nov, 2015 6 commits
- Deleted cybergate rule · 45b4c6d9
```
We have deleted duplicated cybergate rule
```
  j0sm1 authored Nov 26, 2015
  45b4c6d9 Browse Files
- Duplicated Bozok rule · 3295a25c
```
We have deleted duplicated Bozok rule.
```
  j0sm1 authored Nov 26, 2015
  3295a25c Browse Files
- Update GlassRAT.yar - Syntax error · 8c555a1d
```
Syntax Error.
```
  j0sm1 authored Nov 26, 2015
  8c555a1d Browse Files
- Update GlassRAT.yar · f9fcca17
  mmorenog authored Nov 26, 2015
  
  f9fcca17 Browse Files
- Update PoisonIvy.yar · 09f57261
  mmorenog authored Nov 26, 2015
  
  09f57261 Browse Files
- Update PoisonIvy.yar · dc973d9f
  mmorenog authored Nov 26, 2015
  
  dc973d9f Browse Files