Search engine for Yara Rules
This signature detects Symbolic Link (SLK) files that contain Excel 4.0 mac....
This signature detects Microsoft Excel Symbolic Link (SLK) files that conta....
This signature detects a Microsoft Windows executable that has been signed ....
This signature is designed to detect the obfuscation method described by Bo....
Discover embedded PE files, without relying on easily stripped/modified hea....
This signature detects IQY files embedded within PDF documents which use a ....
This signature detects Adobe PDF files that reference a remote UNC object f....
Basic hunt rule for XLS* with macrosheets.
Detect Microsoft Office documents with embedded Adobe Flash files.
This rule looks for a variety of DDE command execution techniques.
https://inquest.net/blog/2020/03/18/Getting-Sneakier-Hidden-Sheets-Data-Con....
http://blog.inquest.net/blog/2019/01/29/Carving-Sneaky-XLM-Files/
Detects suspicious IQY Files using URLs associated with suspicious activity....
Detect Excel IQY files with URLs that contain commonly used malicious file ....
Detects all Excel IQY files by identifying the WEB 'magic' on the first lin....
This signature detects a custom Windows executable format used in relation ....