Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
508 detections
Filters
Last updated
All Time
Detection languages
177
171
34
34
27
Contributors
111
85
80
49
32
Categories
181
138
136
114
62
Platforms
487
30
19
6
2
Products / Services
174
94
90
57
51
MITRE Techniques
18,116
15,638
12,585
8,395
6,225
CVEs
5
4
1
1
1
IDS Classtypes
23
4
2
1
1
IDS Protocols
27
6
Detects default RemCom pipe creation
This YARA rule detects various versions of the DMALocker ransomware. It identifies specific byte patterns associated with file encryption routines, enumeration of shares and logical disks, and remote server communication, indicating the presence and activity of DMALocker.
This rule detects the Dharma ransomware based on specific byte patterns found within the executable. The patterns indicate functionalities related to file searching, encryption routines, and enumeration of network shares, which are characteristic behaviors of Dharma ransomware.
This rule detects the Ako ransomware by identifying specific byte patterns (YARA signatures) associated with its file encryption routines, including those targeting local files and network shares. The rule looks for distinct code sequences related to file enumeration and encryption activities, indicating the presence and execution of the Ako ransomware.
Page 25 of 25