# CoreShield Pro – YARA-regler: regel, forfatter, licens, kilde. Bygget 2026-11-06.
# DRL 1.1: https://github.com/SigmaHQ/Detection-Rule-License · CC BY 4.0: https://creativecommons.org/licenses/by/4.0/
ACE_Containing_EXE	Florian Roth (Nextron Systems) - based on Nick Hoffman' rule - Morphick Inc	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ALFA_SHELL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT10_Malware_Sample_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT12_Malware_Aug17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT15_Malware_Mar18_BS2005	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT15_Malware_Mar18_MSExchangeTool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT15_Malware_Mar18_RoyalCli	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT15_Malware_Mar18_RoyalDNS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT17_Malware_Oct17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT17_Malware_Oct17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT17_Malware_Oct17_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT17_Sample_FXSST_DLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT17_Unsigned_Symantec_Binary_EFA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT28_CHOPSTICK	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT28_HospitalityMalware_document	CSE CybSec Enterprise - Z-Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT28_HospitalityMalware_mvtband_file	CSE CybSec Enterprise - Z-Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT28_SkinnyBoy_Dropper	Cluster25	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT28_SkinnyBoy_Implanter	Cluster25	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT28_SkinnyBoy_Launcher	Cluster25	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT28_SourFace_Malware1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT28_SourFace_Malware2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT28_SourFace_Malware3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT30_Generic_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_B	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_C	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_D	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_E	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_E_v2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_F	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_G	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_H	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_I	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_J	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Generic_K	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT30_Microfost	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_11	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_12	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_13	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_14	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_16	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_18	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_19	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT30_Sample_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_20	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_21	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_22	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_23	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_24	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_25	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_26	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_27	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_28	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_29	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_30	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_31	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_33	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_34	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_35	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT30_Sample_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT34_Malware_Exeruner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT34_Malware_HTA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT6_Malware_Sample_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APTGroupX_PlugXTrojanLoader_StringDecode	Jay DiMartino	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT10_Malware_Imphash_Dec18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT28_Cannon_Trojan_Nov18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT28_Win_FreshFire	threatintel@volexity.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT28_drovorub_kernel_module_unique_strings	NSA / FBI	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT28_drovorub_library_and_unique_strings	NSA / FBI	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT28_drovorub_unique_network_comms_strings	NSA / FBI	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT28_generic_poco_openssl	NSA / FBI	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_BoomBox_May21_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_BoomBox_May21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_BoomBox_PDF_Masq_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_JS_EnvyScout_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_JS_EnvyScout_May21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_LNK_NV_Link_May21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_LNK_Samples_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_Malware_May21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_Malware_May21_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_Malware_May21_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_NativeZone_Loader_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_NOBELIUM_Stageless_Loader_May21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_Win_FlipFlop_LDR	threatintel@volexity.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_add_random_commas_spaces	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_command_elem_cookie_ga_boundary_string	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_custom_encode_decode	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_directory_enumeration_output_strings	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_disk_enumeration_strings	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_encryption_key_2b62	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_encryption_key_schedule	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_encryption_round_function	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_modify_alphabet_custom_encode	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_sorefang_remove_chars_comma_space_dot	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT29_wellmess_dotnet_unique_strings	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT34_PS_Malware_Apr19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT34_PS_Malware_Apr19_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT34_PS_Malware_Apr19_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_CN_ELF_Speculoos_Backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_CRACKSHOT	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_HIGHNOON	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_HIGHNOON_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_HIGHNOON_BIN	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_HIGHNOON_BIN_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_POISONPLUG	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_POISONPLUG_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_POISONPLUG_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_POISONPLUG_SHADOW	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_APT41_RevokedCert_Aug19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_ATP28_Sofacy_Indicators_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Area1_SSF_GoogleSend_Strings	Area 1 (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Area1_SSF_PlugX	Area 1	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_ArtraDownloader2_Aug19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_MacOS_GORAT_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_SUNBURST_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_SUNBURST_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_DShell_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_DShell_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_DShell_3	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_GORAT_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_GORAT_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_GORAT_3	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_GORAT_4	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_GORAT_5	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Backdoor_Win_GoRat_Memory	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Builder_PY_MATRYOSHKA_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Builder_PY_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Builder_PY_REDFLARE_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Builder_Win64_MATRYOSHKA_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_APT27_Compromised_Certficate_Jan22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_Group_Loader_Jan20_1	Vitali Kremez	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_MAL_RedDelta_Shellcode_Loader_Oct20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_MAL_RedDelta_Shellcode_Loader_Oct20_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_MAL_RedDelta_Shellcode_Loader_Oct20_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_TwistedPanda_64bit_Loader	Check Point Research	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_TwistedPanda_SPINNER_1	Check Point Research	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_TwistedPanda_SPINNER_2	Check Point Research	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_TwistedPanda_droppers	Check Point Research	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CN_TwistedPanda_loader	Check Point Research	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Cloaked_CERTUTIL	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Cloaked_PsExec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Cloaked_ScanLine	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Cloaked_SuperScan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_CobaltStrike_Beacon_Indicator	JPCERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Controller_Linux_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_CryWiper_Dec22	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_DNSpionage_Karkoff_Malware_Apr19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_DarkHydrus_Jul18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_DarkHydrus_Jul18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_DarkHydrus_Jul18_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_DonotTeam_YTYframework	James E.C, ProofPoint	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Downloader_Win32_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Downloader_Win64_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Dropper_Raw64_TEARDROP_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Dropper_Win64_MATRYOSHKA_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Dropper_Win64_TEARDROP_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Dropper_Win_MATRYOSHKA_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_EXPL_Sharepoint_CVE_2025_53770_ForensicArtefact_Jul25_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_EXPL_Sharepoint_CVE_2025_53770_ForensicArtefact_Jul25_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Equation_Group_Op_Triangulation_TriangleDB_Implant_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_EXE_Sample_Aug18_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_MalDoc_Aug18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_MsDoc_Sep21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_FIN7_Sample_Aug18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_Sample_Aug18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_Sample_EXE_Aug18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FIN7_Strings_Aug18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_FallChill_RC4_Keys	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_GreyEnergy_Malware_Oct18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_GreyEnergy_Malware_Oct18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_GreyEnergy_Malware_Oct18_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_GreyEnergy_Malware_Oct18_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_GreyEnergy_Malware_Oct18_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HAFNIUM_ForensicArtefacts_Cab_Recon_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HAFNIUM_ForensicArtefacts_WER_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HAFNIUM_Forensic_Artefacts_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HKTL_Proxy_Tool_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HKTL_Wiper_WhisperGate_Jan22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HKTL_Wiper_WhisperGate_Jan22_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HKTL_Wiper_WhisperGate_Stage3_Jan22	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_ADPassHunt_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_ADPassHunt_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_DTRIM_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_FLUFFY_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_FLUFFY_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_GPOHUNT_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_JUSTASK_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_LUALOADER_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_MODIFIEDSHARPVIEW_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_NOAMCI_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_PRAT_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_REDTEAMMATERIALS_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_REVOLVER_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPDACL_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPDNS_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPGOPHER_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPNATIVEZIPPER_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPNFS_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPPATCHCHECK_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPSACK_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPSQLCLIENT_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPSTOMP_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPSTOMP_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPTEMPLATE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPWEBCRAWLER_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_SHARPZIPLIBZIPPER_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_TITOSPECIAL_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_MSIL_WMISPY_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_PS1_COSMICGALE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_Win64_EXCAVATOR_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HackTool_Win64_EXCAVATOR_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HiddenCobra_GhostSecret_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_HiddenCobra_GhostSecret_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_HiddenCobra_enc_PK_header	NCCIC trusted 3rd party - Edit: Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_HiddenCobra_import_obfuscation_2	NCCIC trusted 3rd party - Edit: Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_IIS_Config_ProxyShell_Artifacts	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_IN_TA397_wmRAT	Proofpoint	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_KE3CHANG_TMPFILE	Markus Neis, Swisscom	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Kaspersky_Duqu2_SamsungPrint	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Kaspersky_Duqu2_msi3_32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Kaspersky_Duqu2_procexp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Keylogger_Win32_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Keylogger_Win64_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_LNX_Academic_Camp_May20_Eraser_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_LNX_Academic_Camp_May20_Loader_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Lazarus_Aug18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Lazarus_Aug18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Lazarus_Aug18_Downloader_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Lazarus_Dropper_Jun18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Lazarus_RAT_Jun18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Lazarus_RAT_Jun18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Liudoor	RSA FirstWatch	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_MSIL_PGF_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_MSIL_PGF_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_MSIL_TRIMBISHOP_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_MSIL_TRIMBISHOP_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_MSIL_WILDCHILD_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Raw32_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Raw64_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_DShell_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_DShell_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_DShell_3	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_PGF_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_PGF_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_PGF_3	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_PGF_4	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_PGF_5	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win32_REDFLARE_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_MATRYOSHKA_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_MATRYOSHKA_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_PGF_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_PGF_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_PGF_3	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_PGF_4	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_PGF_5	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win64_REDFLARE_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win_MATRYOSHKA_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win_PGF_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Loader_Win_PGF_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_APT27_Rshell_Jul24	Bundesamt fuer Verfassungsschutz, modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_ASPX_HAFNIUM_Chopper_Mar21_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_ASPX_HAFNIUM_Chopper_Mar21_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_ASP_DLL_HAFNIUM_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_BKA_GoldenSpy_Aug20_1	BKA	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CISA_10365227_01_APPSTORAGE_Dec21	CISA Code & Media Analysis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CISA_10365227_02_ClientUploader_Dec21	CISA Code & Media Analysis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CISA_10365227_03_ClientUploader_Dec21	CISA Code & Media Analysis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Unit78020_Sep15	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_Agent_Csharp	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_agent_powershell_b64encoded	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_agent_powershell_dropper	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_agent_py	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_agent_py_b64encoded	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_checkadmin_bin	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_getos_py	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_info_vbs	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_injector_bin	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_keylogger_file	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_keylogger_py	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_timeliner_bin	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_webshell_console_jsp	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_webshell_index_jsp	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_webshell_ver_jsp	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_webshell_webinfo	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_xserver_csharp	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_xserver_powershell_b64encoded	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_CN_Wocao_xserver_powershell_dropper	Fox-IT SRT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_DNS_Hijacking_Campaign_AA19_024A	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_DTRACK_Oct19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_MAL_FalseFont_Backdoor_Jan24	X__Junior, Jonathan Peters	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Fujinama	ReaQta Threat Intelligence Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Gopuram_Backdoor_Apr23	X__Junior (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_HOPLIGHT_NK_HiddenCobra_Apr19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_HOPLIGHT_NK_HiddenCobra_Apr19_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_HOPLIGHT_NK_HiddenCobra_Apr19_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_HP_iLO_Firmware_Dec21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Hunting_LUA_SEASIDE_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_IR_DruidFly_Wiper_Jun25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Ke3chang_Ketrican_Jun20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_Hunting_Linux_WHIRLPOOL_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_RedMenshen_BPFDoor_Controller_Generic_May22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_RedMenshen_BPFDoor_Controller_May22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_RedMenshen_BPFDoor_Controller_May22_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_RedMenshen_BPFDoor_Controller_May22_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_RedMenshen_BPFDoor_Tricephalic_Implant_May22	Exatrack	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_Turla_Apr202004_1	Leonardo S.p.A.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_Turla_Apr202004_1_opcode	Leonardo S.p.A.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LNX_Turla_Apr20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LUA_Hunting_Lua_SEASPRAY_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LUA_Hunting_Lua_SKIPJACK_2	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_LUA_Hunting_SKIPJACK_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_MacOS_NK_3CX_DYLIB_Mar23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_MalDoc_CloudAtlas_Oct20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_NK_3CX_ICONIC_Stealer_Mar23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_NK_3CX_Malicious_Samples_Mar23_1	X__Junior, Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_NK_3CX_Malicious_Samples_Mar23_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_NK_3CX_Malicious_Samples_Mar23_3	Florian Roth , X__Junior (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_NK_3CX_Malicious_Samples_Mar23_4	MalGamy (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_NK_3CX_macOS_Elextron_App_Mar23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_NK_Lazarus_VHD_Ransomware_Oct20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_NK_Lazarus_VHD_Ransomware_Oct20_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_RANSOM_ViceSociety_Chily_Jan23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_RANSOM_ViceSociety_PolyVice_Jan23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_REvil_Kaseya_Jul21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_REvil_Kaseya_Jul21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_RU_Snake_Indicators_May23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_RU_Snake_Malware_Queue_File_May23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_RU_Turla_Kazuar_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_RU_WIN_Snake_Malware_PeIconSizes_May23_1	CSA	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_SLOTHFULMEDIA_Oct20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Configuration_File_Ciphertext	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Configuration_File_Plaintext	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Configuration_Key	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Configuration_Name_Encrypted	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Socket_Path	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Strings	FR/ANSSI/SDO (composed from 4 saparate rules by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Strings_Typo	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Struct	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_Sandworm_Exaramel_Task_Names	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_SideWinder_implant	AT&T Alien Labs	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_TinyTurla_Sep21_1	Cisco Talos	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_UNC4841_SEASPY_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_UNC4841_SEASPY_LUA_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_URL_CloudAtlas_Oct20_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_VEILEDSIGNAL_Backdoor_Apr23	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_VEILEDSIGNAL_Backdoor_Apr23_2	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_VEILEDSIGNAL_Backdoor_Apr23_3	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_VEILEDSIGNAL_Backdoor_Apr23_4	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_WildNeutron_javacpl	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_WinntiLinux_Dropper_AzazelFork_May19	Silas Cutler (havex [@] chronicle.security), Chronicle Security	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_WinntiLinux_Main_AzazelFork_May19	Silas Cutler (havex [@] chronicle.security), Chronicle Security	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_MAL_macOS_NK_3CX_Malicious_Samples_Mar23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_ME_BigBang_Gen_Jul18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_ME_BigBang_Mal_Jul18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_MagicHound_MalMacro	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_CommentCrew_MiniASP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_Gen1	YarGen Rule Generator	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_Gen4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_MsUpdater_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_MsUpdater_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_MsUpdater_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_PSAPI	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_Rel	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_Rel_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Malware_PutterPanda_WUAUCLT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_NK_AR18_165A_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_NK_AR18_165A_HiddenCobra_import_deob	NCCIC trusted 3rd party - Edit: Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_BabyShark_KimJoingRAT_Apr19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_Lazarus_Network_Backdoor_Unpacked	f-secure	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_Lazarus_RC4_Loop	f-secure	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_MAL_DLL_Apr23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_MAL_Keylogger_Unknown_Nov19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_MAL_M_Hunting_VEILEDSIGNAL_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_MAL_M_Hunting_VEILEDSIGNAL_2	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_MAL_M_Hunting_VEILEDSIGNAL_3	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_MAL_M_Hunting_VEILEDSIGNAL_4	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_MAL_M_Hunting_VEILEDSIGNAL_5	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_MAL_M_Hunting_VEILEDSIGNAL_6	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_Methodology_Artificial_UserAgent_IE_Win7	Steve Miller aka @stvemillertime	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_Scarcruft_RUBY_Shellcode_XOR_Routine	S2WLAB_TALON_JACK2	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_Scarcruft_evolved_ROKRAT	S2WLAB_TALON_JACK2	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_NK_TradingTech_ForensicArtifacts_Apr23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Nazar_Component_Guids	Itay Cohen	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Nazar_Svchost_Commands	Itay Cohen	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Neuron2_Loader_Strings	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_PS1_SysAid_EXPL_ForensicArtifacts_Nov23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_PY_ESXi_Backdoor_Dec22	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_Custom_M1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_Custom_M2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_Custom_M3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_Custom_M4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_Custom_M6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_Custom_M7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_Scripts	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_arping_module	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_basex_module	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_dext_module	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Project_Sauron_kblogi_module	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Proxy_Malware_Packed_dev	FRoth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_PupyRAT_PY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_RANCOR_DDKONG_Malware_Exports	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_RANCOR_JS_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_RANCOR_PLAINTEE_Malware_Exports	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_RANCOR_PLAINTEE_Variant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_RANSOM_Lockbit_ForensicArtifacts_Nov23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_RU_APT27_HyperBro_Vftrace_Loader_Jan22_1	Bundesamt fuer Verfassungsschutz (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_RU_Sandworm_PY_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_RU_Sandworm_PY_May20_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SAP_NetWeaver_Exploitation_Activity_Apr25_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SAP_NetWeaver_Exploitation_Activity_Apr25_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SH_CodeCov_Hack_Apr21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SH_ESXi_Backdoor_Dec22	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SH_Sandworm_Shell_Script_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SUSP_NK_3CX_Malicious_Samples_Mar23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SUSP_NK_3CX_RC4_Key_Mar23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SUSP_Solarwinds_Orion_Config_Anomaly_Dec20	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_CyclopsBlink_config_identifiers	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_CyclopsBlink_core_command_check	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_CyclopsBlink_default_config_values	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_CyclopsBlink_handle_mod_0x51_command	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_CyclopsBlink_handle_mod_0xf_command	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_CyclopsBlink_modified_install_upgrade	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_CyclopsBlink_module_initialisation	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_CyclopsBlink_notable_strings	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_InitFile_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_Keywords_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_SSHD_Config_Modification_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_SSH_Key_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Sandworm_User_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Script_AUS_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_SideWinder_NET_Loader_Aug_2020_1	Arkbird_SOLG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_TA18_149A_Joanap_Sample1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_TA18_149A_Joanap_Sample2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_TA18_149A_Joanap_Sample3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_11	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_12	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_13	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_14	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_16	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_18	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Thrip_Sample_Jun18_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Tick_HomamDownloader_Jun18	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Tick_Sysmon_Loader_Jun18	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_Trojan_Linux_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Trojan_Win_REDFLARE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Trojan_Win_REDFLARE_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Trojan_Win_REDFLARE_3	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Trojan_Win_REDFLARE_4	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Trojan_Win_REDFLARE_5	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Trojan_Win_REDFLARE_6	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Trojan_Win_REDFLARE_7	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Trojan_Win_REDFLARE_8	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_TurlaMosquito_MAL_Oct22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Turla_Agent_BTZ_Gen_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UA_Hermetic_Wiper_Artefacts_Feb22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UA_Hermetic_Wiper_Feb22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UA_Hermetic_Wiper_Scheduled_Task_Feb22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC1151_WindowsInstaller_Silent_InstallProduct_MacroMethod	Proofpoint Threat Research	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC2447_BAT_Runner_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC2447_MAL_RANSOM_HelloKitty_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC2447_MAL_RANSOM_HelloKitty_May21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC2447_MAL_SOMBRAT_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC2447_PS1_WARPRISM_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC4736_NK_MAL_TAXHAUL_3CX_Apr23_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC4841_ESG_Barracuda_CVE_2023_2868_Forensic_Artifacts_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UNC5221_Ivanti_ForensicArtifacts_Jan24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_UTA028_ForensicArtefacts_PaloAlto_CVE_2024_3400_Apr24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Virtualizor_Compromise_ForensicArtifacts_Aug26	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Virtualizor_Compromise_Payload_Aug26	Jonathan Peters (cod3nym)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WEBSHELL_HAFNIUM_Chopper_WebShell	Markus Neis,Swisscom	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WEBSHELL_HAFNIUM_SecChecker_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WEBSHELL_PHP_Sandworm_May20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WEBSHELL_Tiny_WebShell	Markus Neis,Swisscom	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WebShell_AUS_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WebShell_AUS_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WebShell_AUS_JScript_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WebShell_AUS_Tiny_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_WebShell_Tiny_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Webshell_SUPERNOVA_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Webshell_SUPERNOVA_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Winnti_MAL_Dec19_1	Unknown	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Winnti_MAL_Dec19_2	Unknown	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Winnti_MAL_Dec19_3	Unknown	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Winnti_MAL_Dec19_4	Unknown	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_Winnti_MAL_Dec19_5	Unknown	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_apt_duqu2_drivers	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_apt_duqu2_loaders	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
APT_fnv1a_plus_extra_XOR_in_MSIL_experimental	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
APT_lazaruswannacry	Costin G. Raiu, Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ASPXspy2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ASP_CmdAsp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ASPack_ASPACK	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ASPack_Chinese	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ATM_Malware_DispenserXFS	@Xylit0l @r3c0nst / Modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ATM_Malware_JavaDispCash	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ATM_Malware_Loup	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ATM_Malware_XFSADM	Frank Boldewin (@r3c0nst), modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ATM_Malware_XFSCashNCR	Frank Boldewin (@r3c0nst), modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Acrotray_Anomaly	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Agent_BTZ_Aug17	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Agent_BTZ_Proxy_DLL_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Agent_BTZ_Proxy_DLL_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Ajan_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Ajax_PHP_Command_Shell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
AllTheThings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ammyy_Admin_AA_v3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Andromeda_MalBot_Jun_1A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Angry_IP_Scanner_v2_08_ipscan	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Antichat_Shell_v1_3_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Antichat_Socks5_Server_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Antiy_Ports_1_21	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Apolmy_Privesc_Trojan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
AppInitHook	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Armitage_MeterpreterSession_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Armitage_OSX	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Armitage_msfconsole	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Arp_EMP_v1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ArtTrayHookDll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ArtTray_zip_Folder_ArtTray	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Asmodeus_v0_1_pl	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Ayyildiz_Tim___AYT__Shell_v_2_1_Biz_html	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BIN_Client	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BIN_Server	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BKDR_Snarasite_Oct17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BKDR_XZUtil_Binary_CVE_2024_3094_Mar24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BKDR_XZUtil_KillSwitch_CVE_2024_3094_Mar24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BKDR_XZUtil_Script_CVE_2024_3094_Mar24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BTC_Miner_lsass1_chrome_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BackDooR__fr_	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Backdoor_Nitol_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Backdoor_Redosdru_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BadRabbit_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BadRabbit_Mimikatz_Comp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Base64_PS1_Shellcode	Nick Carr, David Ledbetter	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Base64_encoded_Executable	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Batch_Powershell_Invoke_Inveigh	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Batch_Script_To_Run_PsExec	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Beacon_K5om	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Beastdoor_Backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BeepService_Hacktool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BergSilva_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BernhardPOS	Nick Hoffman / Jeremy Humble	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BeyondExec_RemoteAccess_Tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Binary_Drop_Certutil	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BitPaymer	Morphisec labs	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BlackEnergy_BE_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BlackEnergy_BackdoorPass_DropBear_SSH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BlackEnergy_Driver_AMDIDE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BlackEnergy_Driver_USBMDM	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BlackEnergy_KillDisk_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BlackEnergy_KillDisk_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BlackEnergy_VBS_Agent	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Bladabindi_Malware_B64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BluenoroffPoS_DLL	http://blog.trex.re.kr/	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BluesPortScan	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BronzeButler_DGet_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BronzeButler_Daserf_C_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BronzeButler_Daserf_Delphi_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BronzeButler_RarStar_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BronzeButler_UACBypass_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BronzeButler_xxmm_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Brooxml_Hunting	Proofpoint	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Brooxml_Phishing	Proofpoint	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Builder_MSIL_G2JS_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Builder_MSIL_SharpGenerator_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Builder_MSIL_SinfulOffice_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ByPassFireWall_zip_Folder_Ie	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ByPassFireWall_zip_Folder_Inject	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
BypassUac2	yarGen Yara Rule Generator	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BypassUacDll_6	yarGen Yara Rule Generator	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BypassUac_3	yarGen Yara Rule Generator	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BypassUac_9	yarGen Yara Rule Generator	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
BypassUac_EXE	yarGen Yara Rule Generator	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Bytes_used_in_AES_key_generation	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CACTUSTORCH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CGISscan_CGIScan	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CHAOS_Payload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CMStar_Malware_Sep17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_APT_ZeroT_extracted_Go	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_APT_ZeroT_extracted_Mcutil	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_APT_ZeroT_extracted_Zlh	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_APT_ZeroT_nflogger	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Actor_AmmyyAdmin	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Actor_RA_Tool_Ammyy_mscorsvw	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_GUI_Scanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Hacktool_1433_Scanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Hacktool_1433_Scanner_Comp2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Hacktool_BAT_PortsOpen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Hacktool_MilkT_BAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Hacktool_MilkT_Scanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Hacktool_SSPort_Portscanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Hacktool_S_EXE_Portscanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Hacktool_ScanPort_Portscanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ACCESS_brute	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ASP_wshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Alien_D	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Alien_command	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Alien_ee	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Alien_iispwd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Arp_EMP_v1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_AspxClient	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Baidu_Extractor_Ver1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_COOKIE_CooKie	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ChinaChopper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ChinaChopper_db	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Churrasco	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_CleanIISLog	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_CnCerT_CCdoor_CMD	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_CnCerT_CCdoor_CMD_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Codeeer_Explorer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_CookiesView	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_CoolScan_scan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Cracker_SHELL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_DLL_passive_privilege_escalation_ws2help	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_D_injection_V2_32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_DictionaryGenerator	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_F4ck_Team_BlackMoon_Jun15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_F4ck_Team_F4ck_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_F4ck_Team_f4ck	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_F4ck_Team_f4ck_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_FTP_scanning	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Fckeditor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Fpipe_FPipe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_GetHashes	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_GetHashes_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_GetPass_GetPass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_GetSyskey	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_GetWebShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_GroupPolicyRemover	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_HASH_32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_HASH_PwDump7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_HASH_pwhash	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_HTran2_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Happy_Happy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Havij_Havij	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_HconSTFportable	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Hookmsgina	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Htran_V2_40_htran20	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_IIS6_iis6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_IIS_logcleaner1_0_readme	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Injection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Injection_Transit_jmCook	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Injection_transit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Interception	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Interception3389_setup	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Intersect2_Beta	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_InvasionErasor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_LPK2_0_LPK	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Layer_Layer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_LogCleaner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_MAC_IPMAC	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_MSTSC_can_direct_copy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ManualInjection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Master_beta_1_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_MatriXay1073	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Md5CrackTools	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_NBSI_3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_NetFuke_NetFuke	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Oracle_v1_0_Oracle	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_PHP_php11	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Perl_serv_U	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Pk_Pker	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_PostgreSQL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Pwdump7_Pwdump7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_SAMInside	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_SQLServer_inject_Creaked	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Safe3WVS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ScanHistory	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_SegmentWeapon	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ShiftBackdoor_Server	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_SkinHRootkit_SkinH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_SqlMap_Python_Run	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Sword1_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_SwordCollEdition	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_SwordHonkerEdition	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_T00ls_Lpk_Sethc_v2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_T00ls_Lpk_Sethc_v3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_T00ls_Lpk_Sethc_v3_LPK	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_T00ls_Lpk_Sethc_v4_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_T00ls_Lpk_Sethc_v4_LPK	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_T00ls_scanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Tuoku_script_MSSQL_	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Tuoku_script_oracle_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_WebCruiserWVS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_WebRobot	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_WebScan_WebScan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_WebScan_wwwscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASPX_aspx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASPX_aspx2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASPX_aspx3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASPX_aspx4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASPX_shell_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASPX_sniff	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_asp1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_asp2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_asp3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_asp4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_asp404	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_hy2006a	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_rootkit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_ASP_web_asp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_FTP_MYSQL_MSSQL_SSH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Injection_Transit_jmPost	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Interception3389_get	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_JSPMSSQL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_JSP_jsp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Linux_2_6_Exploit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_BlackSky	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_linux	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_PHP_php9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Serv_U_2_admin_by_lake2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Serv_U_asp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Serv_U_by_Goldsun	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Serv_U_serv_u	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Serv_U_servu	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_T00ls_Lpk_Sethc_v4_mail	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Tuoku_script_mssql_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Tuoku_script_mysql	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Tuoku_script_oracle	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_Tuoku_script_xx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_WebShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell__Injection_jmCook_jmPost_ManualInjection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell__Serv_U_by_Goldsun_asp3_Serv_U_asp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell__asp4_asp4_MSSQL__MSSQL_	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell__php1_php7_php9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_assembly	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_cfmShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_cfm_list	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_cfm_xl	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_cmfshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_dz_phpcms_phpbb	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_jspshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_jspshell2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_mycode12	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_nc_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_offlibrary	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_phpwebbackup	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_picloaked_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_portRecall_jsp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_portRecall_jsp2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_su7_x_9_x	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_test3693	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_udf_udf	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Webshell_wshell_asp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Without_a_trace_Wywz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_WordpressScanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_Xiaokui_conversion_tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker__D_injection_V2_32_D_injection_V2_32_D_injection_V2_32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker__LPK_LPK_LPK	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker__PostgreSQL_mysql_injectV1_1_Creak_Oracle_SQLServer_inject_Creaked	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker__builder_shift_SkinH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker__lcx_HTran2_4_htran20	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker__wwwscan_wwwscan_wwwscan_gui	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_arp3_7_arp3_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_cleaner_cl_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_cleaniis	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_clearlogs	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_dedecms5_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_dirdown_dirdown	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_exp_iis7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_exp_ms11011	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_exp_ms11046	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_exp_ms11080	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_exp_win2003	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_getlsasrvaddr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_hashq_Hashq	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_hkmjjiis6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_hxdef100	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_lcx_lcx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_linux_bin	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_mafix_root	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_mempodipper2_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ms10048_x64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ms10048_x86	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_ms11080_withcmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_mssqlpw_scan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_mysql_injectV1_1_Creak	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_nc_MOVE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_net_packet_capt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_net_priv_esc2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_no_net_priv_esc_AddUser	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_passwd_dict_3389	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_portRecall_bc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_portRecall_pr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_pr_debug	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_safe3wvs_cgiscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_shell_brute_tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_2_3389	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_3389	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_3389_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_3389_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_80_AntiFW	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_DUBrute_v3_0_RC3_2_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_DUBrute_v3_0_RC3_3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_mstsc_MSTSCAX	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_sig_3389_xp3389	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_smsniff_smsniff	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_struts2_catbox	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_super_Injection1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_syconfig	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_termsrvhack	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_windows_exp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_windows_mstsc_enhanced_RMDSTC	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_wwwscan_1_wwwscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Honker_wwwscan_gui	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Packed_Scanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Portscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_MyUPnP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_PcShare	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_Shiell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_Temp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_VNCLink	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_Vscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_hscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_item	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_old	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_pc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_srss	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_srss_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_xbat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Tools_xsniff	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Toolset_LScanPortss_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Toolset_NTscan_PipeCmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Toolset__XScanLib_XScanLib_XScanLib	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_Toolset_sig_1433_135_sqlr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_disclosed_20180208_KeyLogger_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_disclosed_20180208_Mal1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_disclosed_20180208_Mal4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_disclosed_20180208_Mal5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_disclosed_20180208_System3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_disclosed_20180208_c	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CN_disclosed_20180208_lsls	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
COZY_FANCY_BEAR_Hunt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
COZY_FANCY_BEAR_modified_VmUpgradeHelper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
COZY_FANCY_BEAR_pagemgr_Hunt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2014_4076_Exploitcode	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2015_1674_CNGSYS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2015_1701_Taihou	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2017_11882_RTF	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2017_8759_Mal_Doc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2017_8759_Mal_HTA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2017_8759_SOAP_Excel	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2017_8759_SOAP_txt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2017_8759_SOAP_via_JS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CVE_2017_8759_WSDL_in_RTF	Security Doggo @xdxdxdxdoa	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Casper_Backdoor_x86	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Casper_EXE_Dropper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Casper_Included_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Casper_SystemInformation_Output	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Casus15_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Certutil_Decode_OR_Download	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Chafer_Exploit_Copyright_2017	Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Chafer_Mimikatz_Custom	Florian Roth (Nextron Systems) / Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Chafer_Packed_Mimikatz	Florian Roth (Nextron Systems) / Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Chafer_Portscanner	Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CheshireCat_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CheshireCat_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CheshireCat_Sample2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ChinaChopper_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ChinaChopper_caidao	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ChinaChopper_one	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ChinaChopper_temp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ChinaChopper_temp_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ChinaChopper_temp_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Chinese_Hacktool_1014	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CleanIISLog	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Cloaked_RAR_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CloudDuke_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CmdAsp_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CmdShell64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Cmdshell32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CobaltGang_Malware_Aug17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CobaltGang_Malware_Aug17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CobaltStrike_C2_Encoded_XOR_Config_Indicator	yara@s3c.za.net	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_C2_Host_Indicator	yara@s3c.za.net	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_CN_Group_BeaconDropper_Aug17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CobaltStrike_MZ_Launcher	yara@s3c.za.net	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Artifact32_and_Resources_Dropper_v1_49_to_v3_14	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Artifact32_v3_14_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Artifact32_v3_1_and_v3_2	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Artifact64_v1_49_v2_x_v3_0_v3_3_thru_v3_14	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Artifact64_v3_14_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Artifact64_v3_1_v3_2_v3_14_and_v4_0	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v1_44	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v1_45	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v1_46	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v1_47	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v1_48	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v1_49	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v2_0_49	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v2_1_and_v2_2	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v2_3	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v2_4	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v2_5	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_0	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_1	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_11	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_11_bugfix_and_v3_12	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_13	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_14	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_2	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_3	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_4	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_5_hf1_and_3_5_1	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_7	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_Dll_v3_8	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_11	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_12	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_13	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_14	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_2	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_3	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_4	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_5_hf1_and_v3_5_1	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_7	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Beacon_x64_v3_8	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Bind64_Bin_v2_5_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Bind_Bin_v2_5_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Browserpivot_x64_Bin_v1_48_to_v3_14_and_Sleeve_Browserpivot_x64_Dll_v4_0_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Bypassuac_Dll_v1_49_to_v3_14_and_Sleeve_Bypassuac_Dll_v4_0_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Bypassuac_x64_Dll_v3_3_to_v3_14_and_Sleeve_Bypassuac_x64_Dll_v4_0_and_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Bypassuactoken_Dll_v3_11_to_v3_14	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Bypassuactoken_x64_Dll_v3_11_to_v3_14	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Covertvpn_Dll_v2_1_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Covertvpn_injector_Exe_v1_44_to_v2_0_49	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Dnsstager_Bin_v1_47_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Elevate_Dll_v3_0_to_v3_14_and_Sleeve_Elevate_Dll_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Elevate_X64_Dll_v3_0_to_v3_14_and_Sleeve_Elevate_X64_Dll_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Httpsstager64_Bin_v3_2_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Httpsstager_Bin_v2_5_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Httpstager64_Bin_v3_2_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Httpstager_Bin_v2_5_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Reverse64_Bin_v2_5_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Reverse_Bin_v2_5_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Smbstager_Bin_v2_5_through_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Template_Py_v3_3_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Template_Sct_v3_3_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Template__x32_x64_Ps1_v1_45_to_v2_5_and_v3_11_to_v3_14	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Template_x86_Vba_v3_8_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Xor_Bin__64bit_v3_12_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources_Xor_Bin_v2_x_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Resources__Template_Vbs_v3_3_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleep_Decoder_Indicator	yara@s3c.za.net	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_BeaconLoader_HA_x64_o_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_BeaconLoader_HA_x86_o_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_BeaconLoader_MVF_x64_o_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_BeaconLoader_MVF_x86_o_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_BeaconLoader_VA_x64_o_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_BeaconLoader_x64_o_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_BeaconLoader_x86_o_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_Dll_v4_0_suspected	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_Dll_v4_1_and_v4_2	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_Dll_v4_3_v4_4_v4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_Dll_v4_7_suspected	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_Dll_x86_v4_0_suspected	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_x64_v4_1_and_v_4_2	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_x64_v4_3	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_x64_v4_4_v_4_5_and_v4_6	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Sleeve_Beacon_x64_v4_5_variant	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike_Unmodifed_Beacon	yara@s3c.za.net	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CobaltStrike__Resources_Browserpivot_Bin_v1_48_to_v3_14_and_Sleeve_Browserpivot_Dll_v4_0_to_v4_x	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_Beacon_Encoded	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_Beacon_XORed_x64	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_Beacon_XORed_x86	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_Beacon_x64	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_Beacon_x86	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_Payload_Encoded	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_TCP_Bind_x64	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_TCP_Bind_x64_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_TCP_Bind_x86	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_TCP_Bind_x86_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_TCP_Reverse_x64	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_TCP_Reverse_x64_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_TCP_Reverse_x86	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_TCP_Reverse_x86_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_dns_stager_x86	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_dns_stager_x86_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_http_stager_x64	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_http_stager_x64_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_http_stager_x86	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_http_stager_x86_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_https_stager_x64	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_https_stager_x64_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_https_stager_x86	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_https_stager_x86_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_smb_stager_x86	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_RAW_Payload_smb_stager_x86_UTF16	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltbaltstrike_strike_Payload_XORed	Avast Threat Intel Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Cobaltgang_PDF_Metadata_Rev_A	Palo Alto Networks Unit 42	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Codoso_CustomTCP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_CustomTCP_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_CustomTCP_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_CustomTCP_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_Gh0st_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_Gh0st_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_Gh0st_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_PGV_PVID_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Codoso_PGV_PVID_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_PGV_PVID_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_PGV_PVID_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_PGV_PVID_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_PGV_PVID_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_PlugX_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_PlugX_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Codoso_PlugX_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CoinHive_Javascript_MoneroMiner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CoinMiner_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ConnectWise_ScreenConnect_Authentication_Bypass_Feb_2024_Exploitation_IIS_Logs	Huntress DE&TH Team (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CookieTools	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CookieTools2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CoreImpact_sysdll_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CorkowDLL	Group IB	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Crackmapexec_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CredTheft_MSIL_ADPassHunt_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CredTheft_MSIL_ADPassHunt_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CredTheft_MSIL_CredSnatcher_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CredTheft_MSIL_TitoSpecial_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CredTheft_MSIL_TitoSpecial_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CredTheft_MSIL_WCMDump_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CredTheft_Win_EXCAVATOR_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CredTheft_Win_EXCAVATOR_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CredentialStealer_Generic_Backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CrimsonRAT_Mar18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
CrowdStrike_SUNSPOT_01	(c) 2021 CrowdStrike Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CrowdStrike_SUNSPOT_02	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CrowdStrike_SUNSPOT_03	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CrowdStrike_Shamoon_DroppedFile	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
CrunchRAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Customize	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Customize_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DKShell_f0772be3c95802a2d1e7a4a3f5a45dcdef6997f3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DK_Brute	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DLL_Injector_Lynx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DTool_Pro_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
DTools2_02_DTools	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DUBrute_DUBrute	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DarkEYEv3_Cryptor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DarkSecurityTeam_Webshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DarkSpy105	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Daserf_Nov1_BronzeButler	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Datper_Backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Debug_BDoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Debug_cress	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Debug_dllTest_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DeepPanda_Trojan_Kakfum	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DeepPanda_htran_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DeepPanda_lot1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DeepPanda_sl_txt_packed	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DefaceKeeper_0_2_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Derusbi_Backdoor_Mar17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Derusbi_Code_Signing_Cert	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Derusbi_Kernel_Driver_WD_UDFS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Destructive_Ransomware_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dexter_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Disclosed_0day_POCs_InjectDll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Disclosed_0day_POCs_exploit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Disclosed_0day_POCs_injector	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Disclosed_0day_POCs_lpe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Disclosed_0day_POCs_lpe_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Disclosed_0day_POCs_payload_MSI	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Disclosed_0day_POCs_shellcodegenerator	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dive_Shell_1_0___Emperor_Hacking_Team_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
DkShell_4000bd83451f0d8501a9dfad60dce39e55ae167d	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DllInjection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dll_LoadEx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Docm_in_PDF	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DomainScanV1_0	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Dorkbot_Injector_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_Down32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_Down64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_NtGod	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_c	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_ch	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_fp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_iis	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_iis7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_lcx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_look	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dos_netstat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DragonFly_APT_Sep17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DragonFly_APT_Sep17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
DragonFly_APT_Sep17_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DragonFly_APT_Sep17_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dridex_Trojan_XML	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
DropBear_SSH_Server	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dropper_DeploysMalwareViaSideLoading	USG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Dropper_HTA_WildChild_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Dropper_LNK_LNKSmasher_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Dubnium_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dubnium_Sample_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dubnium_Sample_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dubnium_Sample_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dubnium_Sample_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dubnium_Sample_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Dubnium_Sample_SSHOpenSSL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Duqu1_5_modules	Silas Cutler (havex@chronicle.security)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Duqu2_Generic1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Duqu2_Sample1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Duqu2_Sample2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Duqu2_Sample3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Duqu2_Sample4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Duqu2_UAs	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
DxShell_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Dx_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EFSO_2_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EQGRP_1212	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_1212_dehex	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BARPUNCH_BPICKER	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BBALL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BBALL_M50FW08_2201	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BBANJO	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BFLEA_2201	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BICECREAM	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BLIAR_BLIQUER	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BPATROL_2201	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BPIE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BUSURPER_2211_724	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BUSURPER_3001_724	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BananaAid	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BananaUsurper_writeJetPlow	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_BpfCreator_RHEL4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_EPBA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_Extrabacon_Output	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_Implants_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_Implants_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_Implants_Gen3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_Implants_Gen4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_Implants_Gen5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_Implants_Gen6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_MixText	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_RC5_RC6_Opcode	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_SecondDate_2211	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_StoreFc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_Unique_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_bc_parser	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_bo	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_callbacks	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_config_jp1_UA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_create_dns_injection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_create_http_injection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_dn_1_0_2_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_durablenapkin_solaris_2_0_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_eligiblebombshell_generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_eligiblecandidate	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_epicbanana_2_1_0_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_extrabacon	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_false	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_hexdump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_installdate	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_jetplow_SH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_morel	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_networkProfiler_orderScans	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_noclient_3_0_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_pandarock	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_payload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_screamingplow	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_shellcode	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_sniffer_xml2pcap	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_sploit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_sploit_py	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_ssh_telnet_29	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_teflondoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_teflonhandle	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_tinyexec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_tinyhttp_setup	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_tunnel_state_reader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_uninstallPBD	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_userscript	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EQGRP_workit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EXE_cloaked_as_TXT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EXE_extension_cloaking	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EXPL_CVE_2021_1647_Apr21_1	Arkbird_SOLG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_CVE_2021_31166_Accept_Encoding_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_CVE_2021_40444_Document_Rels_XML	Jeremy Brown / @alteredbytes	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_CVE_2024_21413_Microsoft_Outlook_RCE_Feb24	X__Junior, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Citrix_Netscaler_ADC_ForensicArtifacts_CVE_2023_3519_Jul23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Citrix_Netscaler_ADC_ForensicArtifacts_CVE_2023_3519_Jul23_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Citrix_Netscaler_ADC_ForensicArtifacts_CVE_2023_3519_Jul23_3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Cleo_Exploitation_JAVA_Payloads_Dec24_1_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Cleo_Exploitation_JAVA_Payloads_Dec24_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Cleo_Exploitation_JAVA_Payloads_Dec24_3	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Cleo_Exploitation_Log_Indicators_Dec24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Cleo_Exploitation_PS1_Indicators_Dec24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Cleo_Exploitation_XML_Indicators_Dec24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Exchange_ProxyNotShell_Patterns_CVE_2022_41040_Oct22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Exchange_ProxyShell_Failed_Aug21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Exchange_ProxyShell_Successful_Aug21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Exploit_TLB_Scripts	Rich Warren (slightly modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Follina_CVE_2022_30190_Msdt_MSProtocolURI_May22	Tobias Michalski, Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_GitLab_CE_RCE_CVE_2021_22205	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_GitLab_CE_RCE_Malformed_JPG_CVE_2021_22204	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_HKTL_LNX_DirtyFragLPE_May26	Pezier Pierre-Henri (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_HKTL_LNX_DirtyFragShellcode_May26	Pezier Pierre-Henri (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_HKTL_macOS_Switcharoo_CVE_2022_46689_Dec22	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_JNDI_Exploit_Patterns_Dec21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_JSP_CommVault_CVE_2025_57791_Aug25_1	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_JSP_CommVault_CVE_2025_57791_Aug25_2	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Keepass_CVE_2023_24055_Jan23	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LNX_CUPS_CVE_2024_47177_Sep24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LNX_Copy_Fail_Artefacts_CVE_2026_31431_Apr26	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LNX_DirtyFrag_ForensicArtefacts_May26	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_CVE_2021_26858_Exchange_Forensic_Artefacts_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_CVE_2021_27055_Exchange_Forensic_Artefacts	Zach Stanford - @svch0st, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_CVE_2021_27065_Exchange_Forensic_Artefacts_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_Cacti_CommandInjection_CVE_2022_46169_Dec22_1	Nasreddine Bencherchali	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_CommVault_CVE_2025_57791_Indicator_Shell_Drop_Aug25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_ProxyNotShell_OWASSRF_PowerShell_Proxy_Log_Dec22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_ProxyNotShell_OWASSRF_PowerShell_Proxy_Log_Dec22_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_ProxyNotShell_OWASSRF_PowerShell_Proxy_Log_Dec22_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_LOG_ProxyNotShell_PowerShell_Proxy_Log_Dec22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Log4j_CVE_2021_44228_Dec21_Hard	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Log4j_CVE_2021_44228_Dec21_OBFUSC	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Log4j_CVE_2021_44228_Dec21_Soft	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Log4j_CVE_2021_44228_JAVA_Exception_Dec21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Log4j_CallBackDomain_IOCs_Dec21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_MAL_MalDoc_OBFUSCT_MHTML_Sep21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_ManageEngine_CVE_2022_47966_Jan23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Office_TemplateInjection_Aug19	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_POC_SpringCore_0day_Indicators_Mar22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_POC_SpringCore_0day_Webshell_Mar22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_PaloAlto_CVE_2024_3400_Apr24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_RAR_Archive_with_Path_Traversal_Aug25	Arnim Rupp (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_RCE_React_Server_CVE_2025_55182_POC_Dec25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_RCE_React_Server_Next_JS_CVE_2025_66478_Errors_Dec25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_RCE_React_Server_Next_JS_CVE_2025_66478_Tracebacks_Dec25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_React_Server_CVE_2025_55182_POC_Dec25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_SUSP_JS_Exploitation_Payloads_Dec25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_SUSP_JS_POC_Dec25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_SUSP_JS_POC_RSC_Detector_Payloads_Dec25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_SUSP_Outlook_CVE_2023_23397_Exfil_IP_Mar23	delivr.to, Florian Roth, Nils Kuhnert, Arnim Rupp, marcin@ulikowski.pl	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_SUSP_Outlook_CVE_2023_23397_SMTP_Mail_Mar23	Nils Kuhnert	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Shitrix_Exploit_Code_Jan20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Strings_CVE_POC_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_WSUS_Exploitation_Indicators_Oct25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_XML_Encoded_CVE_2021_40444	James E.C, Proofpoint	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_Zoho_RCE_Fix_Lines_Dec21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXPL_macOS_Switcharoo_Indicator_Dec22	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXP_DriveCrypt_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EXP_DriveCrypt_x64passldr	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXP_Libre_Office_CVE_2018_16858	John Lambert @JohnLaTwC / modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXP_potential_CVE_2017_11882	ReversingLabs	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_APT32_goopdate_installer	Facebook	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_APT32_osx_backdoor_loader	Facebook	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_APT_Bitter_Win32k_0day_Feb21	dbappsecurity_lieying_lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_APT_UNC2891_SLAPSTICK	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_EXPL_ZTH_LNK_EXPLOIT_A	Peter Girnus	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_HKTL_MAL_TinyShell_Backdoor	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_HKTL_MAL_TinyShell_Backdoor_SPARC	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_HKTL_Nighthawk_RAT	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_MAL_JS_SocGholish_Mar21_1	Nils Kuhnert	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_MAL_SystemBC_Mar22_1	Thomas Barabosch, Deutsche Telekom Security	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_NK_GOLDBACKDOOR_generic_shellcode	Silas Cutler (silas@Stairwell.com)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_NK_GOLDBACKDOOR_inital_shellcode	Silas Cutler (silas@Stairwell.com)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_NK_GOLDBACKDOOR_injected_shellcode	Silas Cutler (silas@Stairwell.com)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_SUSP_OBFUSC_macOS_RootHelper_Obfuscated	im0prtp3	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EXT_WEBSHELL_JSP_Generic_Tiny	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EXT_WEBSHELL_PHP_Generic	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EditKeyLog	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EditKeyLogReadMe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EditServer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EditServer_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EditServer_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EldoS_RawDisk	Florian Roth (Nextron Systems) (with Binar.ly)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Elise_Jan18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Embedded_EXE_Cloaking	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Emdivi_Gen1	Florian Roth (Nextron Systems) @Cyber0ps	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Emdivi_Gen2	Florian Roth (Nextron Systems) @Cyber0ps	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Emdivi_Gen4	Florian Roth (Nextron Systems) @Cyber0ps	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Emdivi_SFX	Florian Roth (Nextron Systems) @Cyber0ps	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Emissary_APT_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Agent_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Exploit_JBoss	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Exploit_Jenkins	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Get_GPPPassword	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Get_Keystrokes	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Get_SecurityPackages	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Install_SSP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_BypassUAC	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_CredentialInjection_Invoke_Mimikatz_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_DllInjection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_EgressCheck	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_InveighRelay_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_MetasploitPayload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_Mimikatz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_Mimikatz_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_Portscan_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_PostExfil	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_PowerDump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_PsExec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_SMBAutoBrute	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_SSHCommand	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_Shellcode	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_ShellcodeMSIL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Invoke_SmbScanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_KeePassConfig	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_KeePassConfig_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Out_Minidump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_Persistence	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_PowerShell_Framework_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_PowerShell_Framework_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_PowerShell_Framework_Gen3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_PowerShell_Framework_Gen4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_PowerShell_Framework_Gen5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_PowerUp_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_ReflectivePick_x64_orig	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Empire_Write_HijackDll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_dumpCredStore	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_invoke_wmi	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_lib_modules_credentials_mimikatz_pth	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_lib_modules_trollsploit_message	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_portscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Empire_skeleton_key	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Enfal_Malware_Backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EnigmaPacker_Rare	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Enigma_Protected_Malware	Florian Roth (Nextron Systems) with the help of binar.ly	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Enigma_Protected_Malware_May17_RhxFiles	Florian Roth (Nextron Systems) with the help of binar.ly	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_CompatLayer_UnilayDLL	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_FileSystem_Filter	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_KernelRootkit	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_Keylogger	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_MS_Identifier	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_NetworkSniffer1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_NetworkSniffer2	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_NetworkSniffer3	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_NetworkSniffer4	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_NetworkSniffer5	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_PlatformOrchestrator	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationDrug_VolRec_Driver	Florian Roth (Nextron Systems) @4nc4p	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationGroup_Auditcleaner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_DUL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_DXGHLP16	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_Gen_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_Gen_2	Auto Generated	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_Gen_3	Auto Generated	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_Gen_4	Auto Generated	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_Gen_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_Gen_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_msgkd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_mstcp32	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_ntevt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_EquationDrug_tdi6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_EventLogEdit_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_GetAdmin_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_LSADUMP_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ModifyGroup_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_PC_Level3_http_flav_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_PC_Level3_http_flav_dll_x64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_PC_Level4_flav_dll_x64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_PC_Level4_flav_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_PassFreely_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_PortMap_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ProcessHide_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ProcessOptions_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_RunAsChild_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_ActiveDirectory_Target	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_AdUser_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Architouch_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Architouch_Eternalsynergy_Smbtouch	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Banner_Implant9x	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DS_ParseLogs	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Darkpulsar_1_1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DiBa_Target	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DiBa_Target_2000	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DiBa_Target_BH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DiBa_Target_BH_2000	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DllLoad_Target	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DmGz_Target	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DmGz_Target_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_DoubleFeatureDll_dll_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Doublepulsar_1_3_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Dsz_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_EXPA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Easybee_1_0_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Easypi_Explodingcan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Eclipsedwing_Rpcproxy_Pcdlllauncher	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Eclipsedwingtouch_1_0_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Educatedscholar_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Educatedscholartouch_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Englishmansdentist_1_2_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_EpWrapper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Erraticgopher_1_0_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Erraticgophertouch_1_0_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Esteemaudit_2_1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Esteemaudittouch_2_1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Eternalromance	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Eternalromance_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Explodingcantouch_1_2_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_GangsterThief_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Gen3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Gen4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_GenKey	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_GetAdmin_LSADUMP_ModifyPrivilege_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_GrDo_FileScanner_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Ifconfig_Target	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Iistouch_1_2_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_KisuComms_Target_2000	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Mcl_NtMemory_Std	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Mofconfig_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Namedpipetouch_2_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Oracle_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_PC_Exploit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_PC_LP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_PC_Legacy_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_PC_Level3_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_PC_Level3_http_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_PC_Level_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_PacketScan_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_ParseCapture	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Processes_Target	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Regread_1_1_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_RemoteCommand_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_RemoteExecute_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_RemoteExecute_Target	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Rpctouch_2_1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_SendPKTrigger	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_SetCallback	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_SetCallbackPorts	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_SetOurAddr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_SetPorts	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_SetResourceName	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Shares_Target	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_SlDecoder	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Smbtouch_1_1_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_Windows_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__AddResource	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__DoubleFeatureReader_DoubleFeatureReader_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__EAFU_ecwi_ESKE_EVFR_RPC2_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ELV_ESKE_13	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ELV_ESKE_ETBL_ETRE_EVFR_11	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ELV_ESKE_EVFR_16	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ELV_ESKE_EVFR_RPC2_15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ELV_ESKE_EVFR_RideArea2_12	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ESKE_RPC2_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ETBL_ETRE_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ETBL_ETRE_SMBTOUCH_17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__Emphasismine	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__LSADUMP_Lp_ModifyPrivilege_Lp_PacketScan_Lp_put_Lp_RemoteExecute_Lp_Windows_Lp_wmi_Lp_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__NameProbe_SMBTOUCH_14	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__SendCFTrigger_SendPKTrigger_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__ecwi_ESKE_EVFR_RPC2_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17__vtuner_vtuner_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_clocksvc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_drivers_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_greatdoc_dll_config	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_lp_mstcp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_msgkd_msslu64_msgki_mssld	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_msgks_mskgu	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_mstcp32_DXGHLP16_tdip	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_ntevt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_ntfltmgr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_promiscdetect_safe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_put_Implant9x	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_pwd_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_rc5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_regprobe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_renamer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_scanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_st_lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_svctouch	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_tacothief	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_wmi_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_xxxRIDEAREA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_yak	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_Toolset_Apr17_yak_min_install	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup__ftshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup__ftshell_ftshell_v3_10_3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup__funnelout_v4_1_0_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup__ghost_sparc_ghost_x86_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup__jparsescan_parsescan_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup__magicjack_v1_1_0_0_client	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup__pclean_v2_1_1_pclean_v2_1_1_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup__scanner_scanner_v2_1_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_calserver	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_charm_saver_win2k_v_2_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cmsd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cmsex	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cryptTool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_curseflower_mswin32_v_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cursehappy_win2k_v_6_1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cursehelper_win2k_i686_v_2_2_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_curseroot_win2k_v_2_1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cursesleepy_mswin32_v_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cursetingle_2_0_1_2_mswin32_v_2_0_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cursewham_curserazor_cursezinger_curseroot_win2k	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_curseyo_win2k_v_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_cursezinger_linuxrh7_3_v_2_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_dumppoppy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ebbisland	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ebbshave	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_eggbasket	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_eh_1_1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_elatedmonkey_1_0_1_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
EquationGroup_electricslide	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_elgingamble	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_emptycriss	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_envisioncollision	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_envoytomato	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_epoxyresin_v1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_estesfox	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_estopmoonlit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_evolvingstrategy_1_0_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ewok	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_exze	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_gr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_gr_dev_bin_now	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_gr_dev_bin_post	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_jackpop	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_jparsescan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_jscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_libXmexploit2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_linux_exactchange	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_magicjack_v1_1_0_0_client_1_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_modifyAudit_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_modifyAudit_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_modifyAuthentication_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_morerats_client_Store	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_morerats_client_addkey	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_morerats_client_genkey	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_morerats_client_noprep	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_nethide_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_nethide_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_noclient_3_3_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ntfltmgr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_orleans_stride_sunos5_9_v_2_4_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_packrat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_parsescan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_pclean_v2_1_1_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_porkclient	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_processinfo_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_promptkill	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_pwdump_Implant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_pwdump_Lp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ratload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_reverse_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_sambal	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_scanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_scanner_output	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_scripme	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_seconddate_ImplantStandalone_3_0_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_slugger2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_smash	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_sshobo	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_store_linux_i386_v_3_3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_telex	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_tmpwatch	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_tnmunger	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_toast_v3_2_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_watcher_linux_i386_v_3_3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_watcher_linux_x86_64_v_3_3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_watcher_solaris_i386_v_3_3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_wrap_telnet	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_x86_linux_exactchange	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_xspy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ys	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EquationGroup_ys_ratload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_DoubleFantasy_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_EOP_Package	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_EquationDrugInstaller	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_EquationLaserInstaller	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_FannyWorm	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_GROK_Keylogger	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_GreyFishInstaller	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_HDD_reprogramming_module	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_SuspiciousString	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_TripleFantasy_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Equation_Kaspersky_TripleFantasy_Loader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EternalRocks_svchost	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
EternalRocks_taskhost	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Exe_Cloaked_as_ThumbsDb	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Exp_EPS_CVE20152545	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Exploit_MS15_077_078	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Exploit_MS15_077_078_HackingTeam	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Explosion_Generic_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Explosion_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Explosion_Sample_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Explosive_EXE	Check Point Software Technologies Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Explosive_UA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FE_APT_Backdoor_Linux32_SLOWPULSE_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Backdoor_Linux32_SLOWPULSE_2	Strozfriedberg	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Trojan_Linux32_LOCKPICK_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Trojan_Linux32_PACEMAKER	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Trojan_Linux_PACEMAKER	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Trojan_PL_PULSEJUMP_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Trojan_PL_QUIETPULSE	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Trojan_PL_RADIALPULSE_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Trojan_PL_RADIALPULSE_2	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Trojan_PL_RADIALPULSE_3	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Webshell_PL_HARDPULSE	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Webshell_PL_PULSECHECK_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_APT_Webshell_PL_STEADYPULSE_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_LEGALSTRIKE_MACRO	Ian.Ahl@fireeye.com @TekDefense - modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_LEGALSTRIKE_RTF	joshua.kim@FireEye. - modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_Trojan_SH_ATRIUM_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FE_Webshell_PL_ATRIUM_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FIN7_Backdoor_Aug17	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FIN7_Dropper_Aug17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FLAME2_Orchestrator	turla @ Uppercase	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FPipe2_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_EFSO_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_RemExp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_RemExp_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_ajan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_ajan_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_c99	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_casus15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_casus15_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_indexer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_indexer_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_ntdaddy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_phpinj	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_phpinj_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_phvayv	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_phvayv_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_reader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_remview	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_remview_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_sincap	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_test	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_zehir4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FSO_s_zehir4_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_Auct_Dez16_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_Gen_Readme1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_Gen_Readme2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_Gen_Readme3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_Gen_Readme4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_README_cup	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_eleganteagle_opscript_1_0_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_gr_gr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_nopen_oneshot	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_opscript	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_strifeworld	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_dubmoat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_earlyshovel	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_ebbisland	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_elgingamble	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_envisioncollision	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_epichero	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_pork	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_shentysdelight	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_stoicsurgeon	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_user_tool_yellowspirit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBroker_violetspirit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FVEY_ShadowBrokers_Jan17_Screen_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FakeM_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fake_AdobeReader_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Fareit_Trojan_Oct15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FeliksPack3___PHP_Shells_2005	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FeliksPack3___PHP_Shells_phpft	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FeliksPack3___PHP_Shells_r57	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FeliksPack3___PHP_Shells_ssh	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FeliksPack3___PHP_Shells_usr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FeliksPack3___PHP_Shells_xIShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FeliksPack3___Scanners_ipscan	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Fidelis_Advisory_Purchase_Order_pps	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fidelis_Advisory_cedt370	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Fierce2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fireball_archer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fireball_de_svr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fireball_gubed	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fireball_lancer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fireball_regkey	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fireball_winsap	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwareqwerty_20120	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwareqwerty_20121	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwareqwerty_20123	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwaresig_20120_cmdDef	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwaresig_20120_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwaresig_20121_cmdDef	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwaresig_20121_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwaresig_20123_cmdDef	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FiveEyes_QUERTY_Malwaresig_20123_sys	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Flash_CVE_2015_5119_APT3_leg	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Foudre_Backdoor_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Foudre_Backdoor_Component_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Foudre_Backdoor_Dropper_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Foudre_Backdoor_SFX	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_32DLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_Config_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_ElevateDLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_ElevateDLL_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_Keyainst_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_PowerShell_Start	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_ResN32DLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_T9000	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FourElementSword_fslapi_dll_gui	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FreeMilk_APT_Mal_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FreeMilk_APT_Mal_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FreeMilk_APT_Mal_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FreeMilk_APT_Mal_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FreeVersion_debug	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
FreeVersion_release	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Freeenki_Infostealer_Nov17	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Freeenki_Infostealer_Nov17_Export_Sig_Testing	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Fscan_Portscanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Furtim_Parent_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Furtim_nativeDLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GIFCloaked_Webshell_A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GRIZZLY_STEPPE_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GRIZZLY_STEPPE_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Gazer_certificate	ESET	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Gazer_certificate_subject	ESET	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Gazer_logfile_name	ESET	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Gen_Base64_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Gen_Net_LocalGroup_Administrators_Add_Command	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Gen_Trojan_Mikey	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Generic_Dropper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GetUserSPNs_PS1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GetUserSPNs_VBS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GhostDragon_Gh0stRAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GhostDragon_Gh0stRAT_Sample2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GhostDragon_Gh0stRAT_Sample3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GlassRAT_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoldDragon_Aux_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoldDragon_Ghost419_RAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
GoldDragon_RunnignRAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
GoldDragon_RunningRAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoldDragon_malware_Feb18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoldenEyeRansomware_Dropper_MalformedZoomit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoldenEye_Ransomware_XLS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoodToolset_ms11011	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoodToolset_ms11046	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoodToolset_ms11080	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoodToolset_pr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
GoogleBot_UserAgent	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Greenbug_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Greenbug_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Greenbug_Malware_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Greenbug_Malware_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Greenbug_Malware_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Greenbug_Malware_Nov17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Groups_cpassword	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Gsecdump_password_dump_file	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Guilin_veterans_cookie_spoofing_tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HDConfig	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HDRoot_Sample_Jul17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HDRoot_Sample_Jul17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_AdaptixC2_Beacon_Apr26	The Hunters Ledger	CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/	https://github.com/Neo23x0/signature-base
HKTL_Amplia_Security_Tool	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_BlackBone_DriverInjector	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_BlueHammer_Apr26	AzizFarghly (Nextron-Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_BruteRatel_Badger_Indicators_Oct22_4	Matthew @embee_research, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Buckeye_Osinfo	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_CN_Dos_GetPass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_CN_Dos_sys	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_CN_ProcHook_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_CN_Project1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_CN_dat_xpf	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_CN_update_PcMain	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_ChromePass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_CobaltStrike_Beacon_4_2_Decrypt	Elastic	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_CobaltStrike_Beacon_Strings	Elastic	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_CobaltStrike_Beacon_XOR_Strings	Elastic	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_CobaltStrike_CS_Core_Oct23	@ninjaparanoid	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_CobaltStrike_SleepMask_Jul22	CodeX	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_CowTunnel_Dec25	RussianPanda	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_DomainPasswordSpray	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_Dsniff	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_EDR_Freeze_Sep25_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_EXPL_POC_LibSSH_Auth_Bypass_CVE_2023_2283_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_EXPL_POC_NET_SharePoint_CVE_2023_29357_Sep23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_EXPL_POC_PY_SharePoint_CVE_2023_29357_Sep23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_EXPL_WIN_PS1_BadSuccessor_May25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_EXPL_WSUS_Exploitation_POC_Oct25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_EmbeddedPDF	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Empire_PowerUp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_FRP_Apr20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_FRP_INI_Apr20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Imphashes_Aug22_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Keyword_InjectDLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Khepri_Beacon_Sep21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Koh_TokenStealer	Will Schroeder (@harmj0y)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_LNX_Pnscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Lazagne_PasswordDumper_Dec18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_LazyCat_LogEraser	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_MAL_Nighthawk_Nov_2022_1	Arkbird_SOLG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Meterpreter_inMemory	netbiosX, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Mimikatz_SkeletonKey_in_memory_Aug20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_MooreR_Port_Scanner	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_NATBypass_Dec22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_NET_Edge_Saved_Passwords_Dumper_May26	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ADFSDump	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ADSearch	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AESShellCodeInjector	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AMSI_Handler	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AVIator	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AV_Evasion_Tool	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Absinthe	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Adamantium_Thief	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AddReferenceDotRedTeam	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AggressorScripts	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Aladdin	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AllTheThings	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Altman	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AmsiScanBufferBypass	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AntiDebug	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Anti_Analysis	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AsyncRAT_C_Sharp	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AtYourService	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_AzureCLI_Extractor	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_BYTAGE	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_BackNet	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_BadPotato	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_BlackNET	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_BlockEtw	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_BrowserGhost	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_BrowserPass	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Browser_ExternalC2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_BypassUAC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CSharpSetThreadContext	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CVE_2019_1064	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CVE_2019_1253	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CVE_2020_0668	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CVE_2020_1206_POC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CVE_2020_1337	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_C_Sharp_R_A_T_Client	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Carbuncle	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CasperStager	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Certify	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Change_Lockscreen	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CinaRAT	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CloneVault	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Crassus	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Crypter_Runtime_AV_s_bypass	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_CsharpAmsiBypass	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Csharp_Loader	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DInvisibleRegistry	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DInvoke	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DInvoke_PoC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DLL_Injection	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DLL_Injector	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DarkEye	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DarkFender	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DecryptAutoLogon	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DesktopGrabber	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DeviceGuardBypasses	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Disable_Windows_Defender	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DoHC2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DotNetAVBypass_Master	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DotNetToJScript	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DotNetToJScript_LanguageModeBreakout	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_DreamProtectorFree	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Driver_Template	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Dropless_Malware	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ESC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_EWSToolkit	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_EasyNet	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_EducationalRAT	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Evasor	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_EvilFOCA	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_EvilWMIProvider	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ExploitRemotingService	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ExternalC2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Farmer	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Fenrir	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_FileSearcher	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ForgeCert	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_GMSAPasswordReader	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_GRAT2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_GadgetToJScript	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Get_RBCD_Threaded	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Gopher	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Group3r	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Grouper2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_HTTPSBeaconShell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_HWIDbypass	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_HastySeries	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_HideFromAMSI	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_HiveJack	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_IIS_backdoor	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Inception	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Inferno	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Internal_Monologue	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_IronKit	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_KeeThief	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Keylogger	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_KeystrokeAPI	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_KittyLitter	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Koh	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_KrbRelay	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_LOLBITS	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Ladon	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_LdapSignCheck	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_LethalHTA	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_LimeLogger	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_LimeUSB_Csharp	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Lime_Crypter	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Lime_Downloader	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Lime_Miner	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Lime_RAT	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_LockLess	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_MalSCCM	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ManagedInjection	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Manager	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Marauder	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Mass_RAT	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_MemeVM	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_MemoryMapper	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_MinerDropper	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Minidump	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_MiscTools	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Misc_CSharp	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_MultiOS_ReverseShell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Mythic	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Naga	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_NashaVM	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Net_GPPPassword	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_NoAmci	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_NoMSBuild	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Nuages	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_OSSFileTool	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Obfuscator	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_OffensiveCSharp	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_OffensivePowerShellTasking	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Offensive__NET	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_POSTDump	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_PSByPassCLM	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Pen_Test_Tools	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_PlasmaRAT	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_PoC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_PortTran	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_PoshC2_Misc	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_PoshSecFramework	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Povlsomware	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_PowerOPS	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_PowerShdll	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Privilege_Escalation	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Quasar	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_RAT_TelegramSpyBot	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Random_CSharpTools	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_RedSharp	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_RegistryStrikesBack	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_RestrictedAdmin	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ReverseShell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_RexCrypter	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Rubeus	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_RunAsUser	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_RunShellcode	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_RuralBishop	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SHAPESHIFTER	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SQLRecon	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SafetyKatz	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Salsa_tools	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SauronEye	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ShadowSpray	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharPermission	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharPersist	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpAdidnsdump	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpAllowedToAct	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpAttack	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpBlock	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpBox	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpByeBear	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpBypassUAC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpC2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpCOM	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpCall	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpChisel	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpChromium	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpClipHistory	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpClipboard	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpCloud	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpCompile	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpCookieMonster	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpCradle	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpCrashEventLog	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpDPAPI	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpDir	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpDomainSpray	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpDump	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpEDRChecker	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpExcel4_DCOM	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpExec	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpFruit	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpGPOAbuse	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpGPO_RemoteAccessPolicies	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpHandler	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpHide	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpHound3	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpImpersonation	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpKatz	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpLdapRelayScan	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpLocker	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpLogger	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpLoginPrompt	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpMapExec	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpMiniDump	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpMove	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpNamedPipePTH	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpOxidResolver	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpPack	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpPrinter	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpRDP	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpRODC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpReg	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSCCM	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSQLPwn	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSSDP	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpScribbles	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSearch	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSecDump	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpShareFinder	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpShares	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpShell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpShooter	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpShot	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSniper	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSocks	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSpray	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpStat	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpStay	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpSvc	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpTask	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpTokenFinder	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpView	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpWMI_1	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpWMI_2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpWSUS	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpWifiGrabber	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SharpWitness	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Sharp_SMBExec	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Sharp_Suite	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Sharp_WMIExec	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Sharpcat	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Sharpire	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ShellCodeRunner	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ShellGen	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ShellcodeLoader	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Simple_Loader	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Snaffler	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SneakyExec	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SneakyService	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SolarFlare	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SpoolSample	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_StandIn	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Stealer	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Stealth_Kid_RAT	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_StormKitty	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Stracciatella	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SuperSQLInjectionV1	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SweetPotato	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_SyscallPOC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_TeleShadow2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Telegra_Csharp_C2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_TellMeYourSecrets	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_TheHackToolBoxTeek	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_The_Collection	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_TikiTorch	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_TokenStomp	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Tokenvator	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ToxicEye	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_TruffleSnout	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_UAC_Escaper	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_UAC_SilentClean	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_USBTrojan	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_UglyEXe	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_UnmanagedPowerShell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_UnstoppableService	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_UrbanBishopLocal	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_VanillaRAT	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Watson	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_WheresMyImplant	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Whisker	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_WhiteListEvasion	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_WindowsDefender_Payload_Downloader	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_WindowsPlague	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_WindowsRpcClients	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_WireTap	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_XORedReflectiveDLL	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_Xploit	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_aresskit	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_azure_password_harvesting	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_bantam	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_clr_meterpreter	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_donut	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_dotnet_gargoyle	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_fakelogonscreen	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_gray_keylogger_2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_hanzoInjection	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_iSpyKeylogger	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_k8fly	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_logger	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_memscan	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_neo_ConfuserEx	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_njCrypter	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_njRAT	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_nopowershell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_p0wnedShell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_p2p	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_physmem2profit	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_privilege_escalation_awesome_scripts_suite	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_rat_shell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_rundotnetdll32	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_scout	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_sitrep	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_wsManager	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NET_GUID_ysoserial_net	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_NativeCmd_subTee_Jul15	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Nim_NimPackt	Cas van Cooten	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_NoPowerShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_PS1_PowerCat_Mar21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_PortScanner_Simple_Jan14	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Portscanner_533_NET_Jun15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_PowerKatz_Feb19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_PowerSploit	Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Python_sectools	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_RedMimicry_Agent	mirar@chaosmail.org	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_RedMimicry_WinntiLoader	mirar@chaosmail.org	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_RedSun_Privilege_Escalation_Apr26	Jonathan Peters (cod3nym)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_RemoteCmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_Reverse_Connect_TCP_PTY_Shell	Jeff Beley	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_RustHound	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_SentinelOne_RemotePotato0_PrivEsc	SentinelOne	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Solarwinds_credential_stealer	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_SqlMap	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_SqlMap_backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Unknown_CN_Generate	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_Unknown_Feb19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Unlicensed_CobaltStrike_EICAR_Jul18_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HKTL_Venom_LIB_Dec22	Ido Veltzman, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_Win_CobaltStrike	threatintel@volexity.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_beRootexe	yarGen Rule Generator	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_beRootexe_output	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_htran_go	Jeff Beley	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_mimikatz_icon	Arnim Rupp	Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License	https://github.com/Neo23x0/signature-base
HKTL_mimikatz_memssp_hookfn	SBousseaden	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_Netcat_UDP	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_PHP_TCP	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_Perl	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_Powershell_TCP	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_Python	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_TCLsh	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_Telnet_TCP	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_awk	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_netcat	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_ruby	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HKTL_shellpop_socat	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HScan_v1_20_PipeCmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HScan_v1_20_hscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HTA_Embedded	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HTA_with_WScript_Shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HTTPSCANNER	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop2006_rar_Folder_2006	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop2006_rar_Folder_2006X	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop2006_rar_Folder_2006X2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop2006_rar_Folder_2006Z	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop_AppPack_2005	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop_CaseSwitch_2005	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop_DevPack_2005	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop_DevPack_2005Red	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop_DevPack_config	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop_DevPack_fso	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop_DevPack_server	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HYTop_DevPack_upload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HackTool_MSIL_CoreHound_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_GETDOMAINPASSWORDPOLICY_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_HOLSTER_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_INVEIGHZERO_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_KeeFarce_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_KeePersist_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_PXELOOT_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_PXELOOT_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_PrepShellcode_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_PuppyHound_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_Rubeus_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SAFETYKATZ_4	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SEATBELT_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SEATBELT_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SHARPZEROLOGON_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharPersist_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharPersist_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharPivot_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharPivot_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharPivot_3	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharPivot_4	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharpHound_3	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharpSchtask_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_SharpStomp_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_WMISharp_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_MSIL_WMIspy_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_PY_ImpacketObfuscation_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_PY_ImpacketObfuscation_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_Producers	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_Samples	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_Win32_AndrewSpecial_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackTool_Win64_AndrewSpecial_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HackingTeam_Elevator_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hackingteam_Elevator_DLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktool_Strings_p0wnedShell	Florian Roth	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktool_This_Cruft	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_445_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Burst_Blast	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Burst_Clear	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Burst_Start	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Burst_Thecard	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Burst_pass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Burst_sql	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_GOGOGO_Bat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Http	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_JoHor_Posts_Killer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Panda_445	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Panda_445TOOL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Panda_Burst	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Panda_tasksvr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Panda_tesksd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_Scan_BAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hacktools_CN_WinEggDrop	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HawkEye_Keylogger_Feb18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HawkEye_PHP_Panel	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hermes2_1	BAE	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HiddenCobra_BANKSHOT_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HiddenCobra_FallChill_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HiddenCobra_FallChill_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HiddenCobra_Rule_1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HiddenCobra_Rule_2	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HiddenCobra_Rule_3	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HiddenCobra_r4_wiper_1	NCCIC Partner	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HiddenCobra_r4_wiper_2	NCCIC Partner	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HoneyBee_Dropper_MalDoc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HttpBrowser_RAT_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HttpBrowser_RAT_Sample1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HttpBrowser_RAT_Sample2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HttpBrowser_RAT_dropper_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HttpBrowser_RAT_dropper_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Hunting_GadgetToJScript_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Hunting_Rule_ShikataGaNai	Steven Miller	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
HvS_APT27_HyperBro_Stage3	Markus Poelloth	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HvS_APT37_RAT_loader	Marc Stroebel	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HvS_APT37_cred_tool	Markus Poelloth	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HvS_APT37_mimikatz_loader_DF012	Marc Stroebel	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HvS_APT37_smb_scanner	Marc Stroebel	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HvS_APT37_webshell_controllers_asp	Moritz Oettle	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HvS_APT37_webshell_img_thumbs_asp	Moritz Oettle	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
HvS_APT37_webshell_template_query_asp	Moritz Oettle	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IDTools_For_WinXP_IdtTool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IDTools_For_WinXP_IdtTool_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IISPutScanner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IISPutScannesr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IMPLANT_10_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_10_v2	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_11_v12	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_12_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_1_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_1_v2	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_1_v3	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_1_v4	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_1_v5	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_1_v6	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_1_v7	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v10	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v11	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v14	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v15	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v16	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v17	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v18	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v19	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v20	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v3	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v5	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v6	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v7	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_2_v9	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_3_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_3_v2	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_3_v3	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v10	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v11	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v12	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v13	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v2	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v3	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v3_AlternativeRule	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IMPLANT_4_v4	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v5	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v6	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v7	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v8	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_4_v9	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_5_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_5_v2	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_5_v3	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_5_v4	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_6_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_6_v2	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_6_v3	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_6_v4	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_6_v5	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_6_v6	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_6_v7	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_7_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_8_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_8_v2	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IMPLANT_9_v1	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IP_Stealing_Utilities	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IceFog_Malware_Feb18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Impacket_Keyword	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Lateral_Movement	Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Impacket_Tools_Generic_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_atexec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_esentutl	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_goldenPac	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_ifmap	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_lookupsid	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_mimikatz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_mmcexec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_netview	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_opdump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_psexec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_rpcdump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_secretsdump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_smbexec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_smbrelayx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_smbtorture	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_sniff	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_sniffer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_tracer	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Impacket_Tools_wmiexec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_wmipersist	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Impacket_Tools_wmiquery	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Imphash_Malware_2_TA17_293A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Imphash_UPX_Packed_Malware_1_TA17_293A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Indetectables_RAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Industroyer_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Industroyer_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Industroyer_Malware_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Industroyer_Malware_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Industroyer_Portscan_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Industroyer_Portscan_3_Output	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
InjectionParameters	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
InstGina	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Invoke_Metasploit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Invoke_Mimikatz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Invoke_OSiRis	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Invoke_PSImage	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Invoke_SMBExec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Invoke_SMBExec_Invoke_WMIExec_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Invoke_WMIExec_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Invoke_WMIExec_Gen_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Invoke_mimikittenz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronGate_APT_Step7ProSim_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronGate_PyInstaller_update_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronPanda_DNSTunClient	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronPanda_Malware1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronPanda_Malware2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronPanda_Malware3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronPanda_Malware4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronPanda_Malware_Htran	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronPanda_Webshell_JSP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IronTiger_ASPXSpy	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_ChangePort_Toolkit_ChangePortExe	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_ChangePort_Toolkit_driversinstall	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_EFH3_encoder	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_GTalk_Trojan	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_GetPassword_x64	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_Gh0stRAT_variant	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_HTTP_SOCKS_Proxy_soexe	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_NBDDos_Gh0stvariant_dropper	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_PlugX_DosEmulator	Cyber Safety Solutions, Trend Micro - modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_PlugX_FastProxy	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_PlugX_Server	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_ReadPWD86	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_Ring_Gh0stvariant	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_dllshellexc2010	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_dnstunnel	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IronTiger_wmiexec	Cyber Safety Solutions, Trend Micro	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
IsDebug_V1_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
IsmDoor_Jul17_A2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
JSP_Browser_APT_webshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
JSP_jfigueiredo_APT_webshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
JSP_jfigueiredo_APT_webshell_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
JS_Suspicious_MSHTA_Bypass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
JS_Suspicious_Obfuscation_Dropbox	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
JavaScript_Run_Suspicious	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Java_Shell_js	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Jc_ALL_WinEggDropShell_rar_Folder_Install_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Jc_WinEggDrop_Shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
JspWebshell_1_2_jsp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
KA_uShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
KHRAT_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
KINS_DLL_zeus	AlienVault Labs aortega@alienvault.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
KINS_dropper	AlienVault Labs aortega@alienvault.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
KR_Target_Malware_Aug17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
KasperMalware_Oct17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
KeeTheft_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
KeeTheft_Out_Shellcode	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
KeeThief_PS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Kekeo_Hacktool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
KeyBoy_876_0x4e20000	Markus Neis, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
KeyBoy_InstallClient	Markus Neis, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
KeyBoy_rasauto	Markus Neis, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
KeyBoy_wab32res	Markus Neis, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
KeyBoys_malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Keylogger_CN_APT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
KiwiTaskmgr_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Korplug_FAST	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Kraken_Bot_Sample	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Kriskynote_Mar17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Kriskynote_Mar17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Kriskynote_Mar17_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LNK_Malicious_Nov1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LOG_APT_HAFNIUM_Exchange_Log_Traces_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_APT_WEBSHELL_Solarwinds_SUNBURST_Report_Webshell_Dec20_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_CVE_2021_27065_Exchange_Forensic_Artefacts_Mar21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_ADSelfService_CVE_2021_40539_ADSLOG_Sep21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_ADSelfService_CVE_2021_40539_WebLog_Sep21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_Citrix_Netscaler_ADC_Exploitation_Attempt_CVE_2023_3519_Jul23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_Confluence_RCE_CVE_2021_26084_Sep21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_Ivanti_EPMM_MobileIron_Core_CVE_2023_35078_Jul23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_MOVEit_Exploitation_Indicator_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_MOVEit_Exploitation_Indicator_Jun23_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_MOVEit_Exploitation_Indicator_Jun23_3	Nasreddine Bencherchali	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_ProxyToken_Exploitation_Aug21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_SUSP_TeamCity_CVE_2023_42793_Oct23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_SUSP_TeamCity_Oct23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_EXPL_SharePoint_CVE_2023_29357_Sep23_1	Florian Roth (with help from @LuemmelSec)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_Exchange_Forensic_Artefacts_CleanUp_Activity_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_F5_BIGIP_Exploitation_Artefacts_CVE_2021_22986_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_ProxyNotShell_POC_CVE_2022_41040_Nov22	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22_	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_TeamViewer_Connect_Chinese_Keyboard_Layout	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LOG_TeamViewer_Connect_Russian_Keyboard_Layout	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LSASS_memory_dump_file	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Laudanum_Tools_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Lazagne_PW_Dumper	Markus Neis / Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Lazarus_Dec_17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Lazarus_Dec_17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Lazarus_Dec_17_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Lazarus_Dec_17_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Leviathan_CobaltStrike_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LightFTP_Config	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LightFTP_fftp_x86_64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Line_Dancer	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LinuxHacktool_eyes_a	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LinuxHacktool_eyes_mass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LinuxHacktool_eyes_pscan2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LinuxHacktool_eyes_pscan2_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LinuxHacktool_eyes_scanssh	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Linux_Portscan_Shark_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Linux_Portscan_Shark_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LiuDoor_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LiuDoor_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Liz0ziM_Private_Safe_Mode_Command_Execuriton_Bypass_Exploit_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_AllTheThings_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_CSharpSectionInjection_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_Generic_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_InMemoryCompilation_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_NETAssemblyInject_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_NetshShellCodeRunner_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_RURALBISHOP_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_RURALBISHOP_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_RuralBishop_1b	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_SharPy_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_TrimBishop_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_WMIRunner_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_MSIL_WildChild_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_Win_Generic_17	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_Win_Generic_18	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_Win_Generic_19	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Loader_Win_Generic_20	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Locky_Ransomware	Florian Roth (Nextron Systems) (with the help of binar.ly)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
LokiBot_Dropper_Packed_R11_Feb18	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
LokiBot_Dropper_ScanCopyPDF_Feb18	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_3CXDesktopApp_MacOS_Backdoor_Mar23	X__Junior (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_3CXDesktopApp_MacOS_UpdateAgent_Mar23	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_Agni	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_Atharvan_3RAT	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_BindShell	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_CutieDrop_MagicRAT	CISA.gov (modified by Florian Roth, Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_DTrack_Unpacked	CISA.gov (modified by Florian Roth, Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_ELF_Backdoor_Fipps	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_GoLang_Validalpha_BlackString	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_GoLang_Validalpha_Handshake	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_GoLang_Validalpha_Tasks	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_Grease2	CISA.gov (modified by Florian Roth, Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_HHSD_FileTransferTool	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_KaosRAT_Yamabot	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_LilithRAT_Variant	CISA.gov (modified by Florian Roth, Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_NoPineapple_Dtrack_Unpacked	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_ScheduledTask_Loader	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_SocksTroy_Strings_OpCodes	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_Andariel_TigerRAT_Crowdsourced_Rule	CISA.gov (modified by Florian Roth, Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_INDICATOR_EXE_Packed_Themida	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_INDICATOR_EXE_Packed_VMProtect	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_TriFaux_EasyRAT_JUPITER	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_WIN_DTrack_Auto	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_NK_WIN_Tiger_RAT_Auto	CISA.gov	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_Nimbus_Manticore_Agent_May26	Jonathan Peters (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_Nimbus_Manticore_Stager_May26	Jonathan Peters (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_APT_Operation_ShadowHammer_MalSetup	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_ARM_LNX_Mirai_Mar13_2022	Mehmet Ali Kerimoglu a.k.a. CYB3RMX	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_AirdViper_Sample_Apr18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_AveMaria_RAT_Jul19	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_BACKORDER_LOADER_WIN_Go_Jan23	Arda Buyukkaya (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_BR_Report_TheDao	@br_data repo	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_BackNet_Nov18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Backdoor_DLL_Nov23_1	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Backdoor_May26	MalGamy	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Backdoor_Naikon_APT_Sample1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Backdoor_SPAREPART_SleepGenerator	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Backdoor_SPAREPART_Struct	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Backdoor_Win_C3_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Beacon_Unknown_Feb24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_11	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_12	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_13	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_14	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_16	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_18	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_19	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_20	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_21	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_22	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_BurningUmbrella_Sample_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_CMD_Script_Obfuscated_Feb19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CN_FlyStudio_May18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_CRIME_CobaltGang_Malware_Oct19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CRIME_RANSOM_DearCry_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CRIME_RAT_WIN_PE_GodRat_Aug25	Arda Buyukkaya	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CRIME_Unknown_ISO_Jun21_1	Nils Kuhnert	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CRIME_Unknown_LNK_Jun21_1	Nils Kuhnert	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CRIME_suspicious_hex_string_Jun21_1	Nils Kuhnert	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CS_Loader_Feb24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Chrysalis_Backdoor_Feb26	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Chrysalis_DllLoader_Feb26	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Chrysalis_Shellcode_Loader_Feb26	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Cisco_RayInitiator_Stage_3_LINE_VIPER_ShellCode	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Claude_Refusal_Magic_String_Jan26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CobaltStrike_Beacon_Loader_Feb26	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Compromised_Cert_DuckTail_Stealer_Jun23	dr4k0nia	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CoralWave_LenovoSPKVOL_RemcosMicDrop	xstp	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_CrypRAT_Jan19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_DAEMON_Tools_Lite_Compromised_May26	Jonathan Peters (cod3nym)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_DLL_Chrome_App_Bound_Encryption_Decryption_May25	MAlGamy	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_DLL_Stealer_Nov23	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_DNSPIONAGE_Malware_Nov18	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_DOC_ZLoader_Oct20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_DevilsTongue_HijackDll	Microsoft Threat Intelligence Center (MSTIC)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_773B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gentilkiwibenjamindelpy_Mimidrv_Mimidrvmimikatz_0F58	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gentilkiwibenjamindelpy_Mimidrv_Mimidrvmimikatz_14B8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gentilkiwibenjamindelpy_Mimidrv_Mimidrvmimikatz_2FD4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gentilkiwibenjamindelpy_Mimidrv_Mimidrvmimikatz_30E0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gentilkiwibenjamindelpy_Mimidrv_Mimidrvmimikatz_41AD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gentilkiwibenjamindelpy_Mimidrv_Mimidrvmimikatz_7662	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gentilkiwibenjamindelpy_Mimidrv_Mimidrvmimikatz_AAF0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gentilkiwibenjamindelpy_Mimidrv_Mimidrvmimikatz_DDF4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Gmer_Gmersys_Gmer_0052	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Legalcorp_Pciexpressvideocapture_FD22	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Microsoftcorporation_Ndislansys_Microsoftwindowsoperatingsystem_B0EB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Microsoftcorporation_Ntbiosys_Microsoftrwindowsrntoperatingsystem_C0D8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Microsoftcorporation_Srvnetsys_Microsoftwindowsoperatingsystem_F6C3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Microsoftcorporation_Wantdsys_Microsoftwindowsoperatingsystem_6908	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Microsoftcorporation_Wantdsys_Microsoftwindowsoperatingsystem_81C7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Microsoftcorporation_Wantdsys_Microsoftwindowsoperatingsystem_E7AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Microsoftcorporation_Windbgsys_Microsoftwindowsoperatingsystem_6994	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Microsoftcorporation_Wintapixsys_Microsoftwindowsoperatingsystem_8578	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Mimidrv_Mimidrvmimikatz_2FAF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Sensecorp_42B2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Driver_Sensecorp_7F45	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Dropper_Win_Darkside_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ELF_LNX_Mirai_Oct10_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ELF_LNX_Mirai_Oct10_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ELF_ReverseShell_SSLShell_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ELF_SALTWATER_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ELF_TorchTriton	Silas Cutler	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ELF_VPNFilter_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_ELF_VPNFilter_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_ELF_VPNFilter_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_ELF_Xlogin_Nov24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_EXE_LockBit_v2	Silas Cutler, modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_EXE_PrestigeRansomware	Silas Cutler, modfied by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_EXE_RoyalRansomware	Silas Cutler, modfied by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_EXPL_Perfctl_Oct24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_EarthWorm_Socks_Proxy_ID_Generation	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Emdivi_Gen3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Emotet_BKA_Cleanup_Apr21	press inquiries <info@bka.de>, technical contact <info@mha.bka.de>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Emotet_BKA_Quarantine_Apr21	press inquiries <info@bka.de>, technical contact <info@mha.bka.de>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Emotet_JS_Dropper_Oct19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Emotet_Jan20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Enfal_Nov22	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Envrial_Jan18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Etoroloro_Malicious_NodePackage_Dec25	Pezier Pierre-Henri	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Fake_Document_Software_Indicators_Nov23	Jonathan Peters	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Floxif_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Fortinet_COATHANGER_Beacon	NLD MIVD - JSCU	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Fortinet_COATHANGER_Files	NLD MIVD - JSCU	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_GOLDBACKDOOR_LNK	Greg Lesnewich	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_G_APT_Backdoor_BRICKSTORM_1	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_G_APT_Backdoor_BRICKSTORM_2	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_G_APT_Backdoor_BRICKSTORM_3	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_G_Backdoor_BRICKSTEAL_1	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_G_Backdoor_BRICKSTORM_2	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_G_Dropper_BRICKSTEAL_1	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_G_Dropper_BRICKSTEAL_2	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_GandCrab_Apr18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Github_Repo_Compromise_MyJino_Ru_Aug22	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Go_Modbus_Jul24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Gopuram_Apr23	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License	https://github.com/Neo23x0/signature-base
MAL_GoziCrypter_Dec20_1	James Quinn	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Grace_Dec22	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_HawkEye_Keylogger_Gen_Dec18	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Hogfish_Report_Related_Sample	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_IceId_Core_202104	Thomas Barabosch, Telekom Security	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_IcedID_Fake_GZIP_Bokbot_202104	Thomas Barabosch, Telekom Security	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_IcedID_GZIP_LDR_202104	Thomas Barabosch, Telekom Security	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_IcedId_Core_LDR_202104	Thomas Barabosch, Telekom Security	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Information_Collector_May26	MalGamy, Jonathan Peters (cod3nym)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_JAVA_Loader_Final_Jar_Aug25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_JRAT_Oct18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_JS_EFile_Apr23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_JS_NPM_SupplyChain_Attack_Nov25	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_JS_NPM_SupplyChain_Attack_Sep25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_JS_NPM_SupplyChain_Compromise_Sep25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Janicab_LNK	Greg Lesnewich	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_KHRAT_script	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_KHRAT_scritplet	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Katz_Stealer_May25	MalGamy (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Kernel_RegPhantom_Mar26	Pezier Pierre-Henri (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Kwampirs_Apr18	Symantec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_LNX_BiBi_Linux_Wiper	Felipe Duarte, Security Joes	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_LNX_CamaroDragon_HorseShell_Oct23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_LNX_CamaroDragon_Sheel_Oct23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_LNX_LinaDoor_Rootkit_May22	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_LNX_PLAGUE_BACKDOOR_Jul25	Pezier Pierre-Henri	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_LNX_Perfctl_Oct24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_LNX_RedMenshen_BPFDoor_May23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_LiteLLM_SupplyChain_Mar26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Loader_TurtleLoader_Nov23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ME_RawDisk_Agent_Jan20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ME_RawDisk_Agent_Jan20_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_MSI_Mpyutils_Feb24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Malware_Imphash_Mar23_1	Arnim Rupp	Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License	https://github.com/Neo23x0/signature-base
MAL_Metasploit_Framework_UA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Minimalistic_Backdoor_May26	MalGamy	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Mirai_Nov19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_MuddyWater_DroppedTask_Jun18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_NET_Katz_Stealer_Loader_May25	Jonathan Peters (cod3nym)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_NET_UAC_Bypass_May25	Jonathan Peters (cod3nym)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_NPM_SupplyChain_Attack_Mar26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_NPM_SupplyChain_Attack_PreInstallScript_Nov25	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Neshta_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Netfilter_Dropper_Jun_2021_1	Arkbird_SOLG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Netfilter_May_2021_1	Arkbird_SOLG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Nitol_Malware_Jan19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_OBFUSC_Unknown_Jan22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_OSX_FancyBear_Agent_Jul18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_PE_Type_BabyShark_Loader	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_PHISH_Final_Payload_Feb25	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_PHISH_ShellCode_Enc_Payload_Feb25	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_PHP_EFile_Apr23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_POC_Microsoft_Warbird_Loader_Feb26	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_PY_Dimorf	Silas Cutler	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Parite_Malware_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Parite_Malware_May19_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Passwordstate_Moserware_Backdoor_Apr21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Payload_F5_BIG_IP_Exploitations_Jul20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_PeerBlight_Dec25	RussianPanda	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Prolock_Malware	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Python_Backdoor_Script_Nov23	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_QBot_HTML_Smuggling_Indicators_Oct22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_QuasarRAT_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_COVID19_Apr20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_ContiCrypter	James Quinn, Binary Defense	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_Crime_DearCry_Mar2021_1	Nils Kuhnert	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_DarkBit_Feb23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_DarkBit_Feb23_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_Darkside_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_ELF_ESXi_Attacks_Feb23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_Gentlemen_Jun26_1	Aryu-RU	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_INC_Aug24	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_LNX_macOS_LockBit_Apr23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_LockBit_Apr23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_LockBit_ForensicArtifacts_Apr23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_LockBit_Indicators_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_LockBit_Locker_LOG_Apr23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_Lorenz_May21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_REvil_Oct20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_Ragna_Locker_Apr20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_RobinHood_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_SH_ESXi_Attacks_Feb23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_SH_ESXi_Attacks_Feb23_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_Stealbit_Aug21	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RANSOM_Venus_Nov22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RTF_Embedded_OLE_PE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Ramnit_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Ransom_Ragnarlocker_July_2020_1	Arkbird_SOLG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Ransomware_GermanWiper	Frank Boldewin (@r3c0nst), modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Ransomware_Wadhrama	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Ransomware_Win_DARKSIDE_v1_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_RedLeaves_Apr18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Ryuk_Ransomware	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_SUSP_Gamaredon_GetImportByHash	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_SUSP_RANSOM_Lazy_RansomNote_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_SUSP_RANSOM_LockBit_RansomNote_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Sednit_DelphiDownloader_Apr18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Sednit_DelphiDownloader_Apr18_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Sharpshooter_Excel4	John Lambert, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Shellcode_Loader_Apr23	X__Junior (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Sindoor_Decryptor_Aug25	Pezier Pierre-Henri	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Sindoor_Downloader_Aug25	Pezier Pierre-Henri	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Sophos_XG_Pygmy_Goat_AES_Key	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Sophos_XG_Pygmy_Goat_Magic_Strings	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Telnyx_SupplyChain_Mar26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Trickbot_Oct19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Trickbot_Oct19_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Trickbot_Oct19_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Trickbot_Oct19_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Trickbot_Oct19_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Trickbot_Oct19_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Trojan_DLL_Nov23	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Turla_Agent_BTZ	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Turla_Sample_May18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_UNC2891_Caketap	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_UNC2891_Slapstick	Frank Boldewin (@r3c0nst), slightly modifier by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_UNC2891_Steelcorgi	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_UNC2891_Winghook	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Unknown_Discord_Characteristics_Jan22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Unknown_PWDumper_Apr18_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Visel_Sample_May18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_WAR_Ivanti_EPMM_MobileIron_LogClear_JAVA_Aug23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_WAR_Ivanti_EPMM_MobileIron_Mi_War_Aug23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_WIN_Akira_Apr25	0x0d4y-Icaro Cesar	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_WIN_Megazord_Apr25	0x0d4y-Icaro Cesar	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_WIN_Ralordv1_Apr25	0x0d4y-Icaro Cesar	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_WIPER_BiBi_Oct23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_WIPER_CaddyWiper_Mar22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_WIPER_IsaacWiper_Mar22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_WIPER_Unknown_Jun25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_WebMonitor_RAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Win_Amadey_Jun25	0x0d4y	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_Winnti_BR_Report_MockingJay	@br_data repo	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Winnti_BR_Report_TwinPeaks	@br_data repo	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Winnti_Sample_May18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MAL_WshRAT_Dotnet_Packer_Feb21	Yoroi Malware ZLab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_XMR_Miner_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Xbash_JS_Sep18	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Xbash_PY_Sep18	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_Xbash_SH_Sep18	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ZIP_SocGholish_Mar21_1	Nils Kuhnert	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_ZinFoq_Dec25	RussianPanda	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_crime_win32_loader_guloader_1_experimental	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_crime_win32_rat_parallax_shell_bin	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MAL_unspecified_Jan18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ME_Campaign_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ME_Campaign_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ME_Campaign_Malware_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ME_Campaign_Malware_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ME_Campaign_Malware_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MS08_067_Exploit_Hacktools_CN	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MSBuild_Mimikatz_Execution_via_XML	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MSIL_Launcher_DUEDLLIGENCE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MSIL_SUSP_OBFUSC_XorStringsNet	dr4k0nia	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MSSqlPass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
M_APT_Downloader_BEATDROP	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_APT_Downloader_BOOMMIC	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_APT_VIRTUALPITA_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_APT_VIRTUALPITA_2	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_APT_VIRTUALPITA_3	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_APT_VIRTUALPITA_4	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_Hunting_Backdoor_ZIPLINE_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_Hunting_CredTheft_WARPWIRE_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_Hunting_Dropper_THINSPOOL_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_Hunting_Dropper_WIREFIRE_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_Hunting_Python_Backdoor_CommandParser_1	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
M_Hunting_Webshell_LIGHTWIRE_2	Mandiant (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MachO	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Mal_Dropper_httpEXE_from_CAB	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mal_PotPlayer_DLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mal_http_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malicious_BAT_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malicious_SFX1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malicious_SFX2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_Floxif_mpsvc_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_JS_powershell_obfuscated	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_MsUpdater_String_in_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_QA_1177	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_QA_get_The_FucKinG_IP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_QA_not_copy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_QA_tls	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_QA_update	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_QA_update_test	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Malware_QA_vqgk	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MarathonTool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MarathonTool_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Metasploit_Loader_RSMudge	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Methodology_Contains_Shortcut_OtherURIhandlers	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_OLE_CHARENCODING_2	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Shortcut_HotKey	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_BaseURLSyntax	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_Evasion	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_IconNotFromExeOrDLLOrICO	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_IconRemote_HTTP	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_IconRemote_SMBorLocal	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_IconShenanigans_dotDL	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_LOLcommand	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_Local_URL	@itsreallynick (Nick Carr), @QW5kcmV3 (Andrew Thompson)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_SMB_URL	@itsreallynick (Nick Carr), @QW5kcmV3 (Andrew Thompson)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_ScriptURL	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_WebDAV	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_WorkingDirRemote_HTTP	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Methodology_Suspicious_Shortcut_WorkingDirRemote_SMB	@itsreallynick (Nick Carr)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Miari_2_May17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Microcin_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Microcin_Sample_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Microcin_Sample_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Microcin_Sample_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Microcin_Sample_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Microcin_Sample_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mimikatz_Gen_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mimikatz_Logfile	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mimikatz_Memory_Rule_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Mimikatz_Memory_Rule_2	Florian Roth (Nextron Systems) - Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Mimikatz_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mimipenguin_SH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MiniDionis_VBS_Dropped	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MiniDionis_readerView	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MiniDumpTest_msdsc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MiniRAT_Gen_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mirai_1_May17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mirai_Botnet_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mithozhan_Trojan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mithril_Mithril	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mithril_dllTest	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mithril_v1_45_Mithril	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Mithril_v1_45_dllTest	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MockDll_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Molerats_Jul17_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Molerats_Jul17_Sample_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Molerats_Jul17_Sample_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Molerats_Jul17_Sample_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Molerats_Jul17_Sample_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Molerats_Jul17_Sample_Dropper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Monsoon_APT_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Monsoon_APT_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Moroccan_Spamers_Ma_EditioN_By_GhOsT_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Ms_Viru_racle	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ms_Viru_v	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_11	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_exe_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_psh	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_ref	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Msfpayloads_msf_svc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MuddyWater_Mal_Doc_Feb18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MuddyWater_Mal_Doc_Feb18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
MySQL_Web_Interface_Version_0_8_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
MyWScript_CompiledScript	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
NK_Miner_Malware_Jan18_1	Florian Roth (Nextron Systems) (original rule by Chris Doman)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
NTLM_Dump_Output	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
NT_Addy_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Nanocore_RAT_Feb18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Nanocore_RAT_Feb18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Nanocore_RAT_Gen_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Nanocore_RAT_Gen_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Nanocore_RAT_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Nanocore_RAT_Sample_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Nautilus_common_strings	NCSC UK	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Nautilus_forensic_artificats	NCSC UK / Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Nautilus_modified_rc4_loop	NCSC UK	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Nautilus_rc4_key	NCSC UK	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Ncat_Hacktools_CN	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ncrack	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
NetBIOS_Name_Scanner	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Netview_Hacktool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Netview_Hacktool_Output	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Neuron_common_strings	NCSC UK	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Neuron_standalone_signature	NCSC UK	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Nirsoft_NetResView	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Nishang_Webshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
No_PowerShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
NotPetya_Ransomware_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Nshell__1__php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
NtGodMode	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ONHAT_Proxy_Hacktool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OPCLEAVER_BackDoorLogger	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_CCProxy_Config	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OPCLEAVER_Jasus	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_LoggerModule	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_NetC	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_Parviz_Developer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OPCLEAVER_ShellCreator2	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_SmartCopy2	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_SynFlooder	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_TinyZBot	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_ZhoupinExploitCrew	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_antivirusdetector	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_csext	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_kagent	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_mimikatzWrapper	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_pvz_in	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_pvz_out	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_wndTest	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_zhCat	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_zhLookUp	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OPCLEAVER_zhmimikatz	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OSEditor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OSX_backdoor_Bella	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OSX_backdoor_EvilOSX	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Obfuscated_JS_April17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Obfuscated_VBS_April17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Octowave_Installer_03_2025	Jai Minton (@CyberRaiju) - HuntressLabs	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Octowave_Loader_03_2025	Jai Minton (@CyberRaiju) - HuntressLabs	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Octowave_Loader_Supporting_File_03_2025	Jai Minton (@CyberRaiju) - HuntressLabs	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Office_AutoOpen_Macro	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Office_DDEAUTO_field	NVISO Labs	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Office_DDE_field	NVISO Labs	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Office_OLE_DDE	NVISO Labs	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Office_OLE_DDEAUTO	NVISO Labs	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Office_as_MHTML	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_Campaign_Reconnaissance	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_ISMAgent_Campaign_Samples1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_ISMAgent_Campaign_Samples2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_ISMAgent_Campaign_Samples3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_Malware_Campaign_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_Malware_Campaign_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OilRig_Malware_Campaign_Gen3	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OilRig_Malware_Campaign_Mal1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_Malware_Campaign_Mal2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_Malware_Campaign_Mal3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_Malware_Nov17_13	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_RGDoor_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OilRig_Strings_Oct17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Oilrig_IntelSecurityManager	Eyal Sela	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Oilrig_IntelSecurityManager_macro	Eyal Sela (slightly modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Oilrig_Myrtille	Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Oilrig_PS_CnC	Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OlympicDestroyer_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Cloaked_PSCP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Dropper_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_11	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_Malware_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_WindowXarBot	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_WmiDLL_inMemory	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpCloudHopper_lockdown	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpHoneybee_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OpHoneybee_MaoCheng_Dropper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OracleScan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OtherTools_servu	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
OtherTools_xiaoa	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PAExec	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PAExec_Cloaked	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PAS_TOOL_PHP_WEB_KIT_mod	US CERT - modified by Florian Roth due to performance reasons	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PAS_Webshell_Encoded	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHANTASMA_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PHISH_02Dez2015_attach_P_ORD_C_10156_124658	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHISH_02Dez2015_dropped_p0o6543f_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHISH_02Dez2015_dropped_p0o6543f_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHP_Backdoor_Connect_pl_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PHP_Backdoor_v1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHP_Cloaked_Webshell_SuperFetchExec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHP_Shell_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PHP_Shell_v1_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHP_Webshell_1_Feb17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHP_sh	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PHP_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PLEAD_Downloader_Jun18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PLUGIN_AJunk	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PLUGIN_TracKid	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PLUGX_RedLeaves	US-CERT Code Analysis Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
POSHSPY_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PP_CN_APT_ZeroT_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PROMETHIUM_NEODYMIUM_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PROMETHIUM_NEODYMIUM_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PROMETHIUM_NEODYMIUM_Malware_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PROMETHIUM_NEODYMIUM_Malware_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PROMETHIUM_NEODYMIUM_Malware_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PROMETHIUM_NEODYMIUM_Malware_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PSAttack_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PSAttack_ZIP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PS_AMSI_Bypass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PScan_Portscan_1	F. Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_AnyDesk_Compromised_Certificate_Revoked_Jan24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_CryptoMiner_Jan19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_Crypto_Mining_CommandLine_Indicators_Oct21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_LNX_XMRIG_CryptoMiner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_3F20	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Adlicesoftware_Truesight_Truesight_BFC2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_909D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_9B1A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_A130	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_AF10	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_F6CD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_FF96	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Aoddriversys_Amdoverdriveservicedriver_3C11	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Aoddriversys_Amdoverdriveservicedriver_81D5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevices_Aoddriversys_Amdoverdriveservicedriver_F4DC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevicesinc_Amdpowerprofilersys_Amduprof_0AF5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevicesinc_Pdfwkrnlsys_Usbcpowerdeliveryfirmwareupdatetoolkerneldriver_0CF8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevicesinc_Pdfwkrnlsys_Usbcpowerdeliveryfirmwareupdateutilitydriver_5DF6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Advancedmicrodevicesinc_Pdfwkrnlsys_Usbcpowerdeliveryfirmwareupdateutilitydriver_6945	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_0BD1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_1E94	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_88FB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_965D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_AD23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_F4EE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Anticheatexpertcom_Acebase_Anticheatexpert_7326	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Arthurliberman_Alsysiosys_Alsysio_119C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Arthurliberman_Alsysiosys_Alsysio_7196	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Arthurliberman_Alsysiosys_Alsysio_7F37	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asmediatechnologyinc_Asmiosys_Asmediapcidriver_E465	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asrockincorporation_Asrautochkupddrvsys_Asrautochkupddrvdriver_2AA1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asrockincorporation_Asrautochkupddrvsys_Asrautochkupddrvdriver_4AE4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asrockincorporation_Asrdrvsys_Asrockiodriver_4D03	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asus_Asmmapsys_Atkgenericfunctionservice_025E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asustek_Driversys_Ectool_927C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asustekcomputerinc_Atsziosys_Atsziodriver_1A4F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asustekcomputerinc_Atsziosys_Atsziodriver_55A1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asustekcomputerinc_Atsziosys_Atsziodriver_FB6B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asustekcomputerinc_Bsdefsys_Supportsstsfssteeatftatcamfntamfnbvctvcbmftwc_5F5E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asustekcomputerinc_Eiosys_Asusvgakernelmodedriver_B175	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asustekcomputerinc_Eiosys_Asusvgakernelmodedriver_F4C7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Asustekcomputerinc_Iomapsys_Asuskernelmodedriverfornt_EA85	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Atitechnologiesinc_Atillksys_Atidiagnostics_AD40	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Atszio_Atsziodriver_673B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avaluetechnologyinc_Avalueio_Avalueio_A5A4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpot_Avastantivirus_1768	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpot_Avastantivirus_36E3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpot_Avastantivirus_3B6E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpot_Avastantivirus_4B52	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpot_Avastantivirus_7AD0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpot_Avastantivirus_AD8F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_0F17	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_1273	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_14AD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_1A42	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_2732	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_4DA0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_6500	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_86A1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_A5A5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_AAA3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_BE8D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_D5C4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_DCB8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_EBE2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Aswvmmsys_Avastantivirus_3650	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Ngiodriversys_Avastng_1072	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Ngiodriversys_Avastng_1A45	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Ngiodriversys_Avastng_42B3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Ngiodriversys_Avastng_5E3B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Ngiodriversys_Avastng_5FAE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Ngiodriversys_Avastng_7337	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Ngiodriversys_Avastng_85FD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avastsoftware_Ngiodriversys_Avastng_D0E4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_0B54	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_0CD4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_19D0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_2CE8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_34E0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_5BD4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_9491	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_0B2A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_0F01	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_1023	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_1078	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_2594	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_6E0A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_6FB5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_7D43	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_8CFD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_9A54	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_A2F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_E2E7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_E452	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Biostargroup_Iodriver_Biostariodriver_1D03	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Biostargroup_Iodriver_Biostariodriver_D205	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Biostargroup_Iodriver_Biostariodriverfle_42E1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Bsmisys_5962	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_00D9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_0FC3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_348D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_3913	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_6D2C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_767E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_8D33	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_A97B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_BC45	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cn_Computerzsys_DEE3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Computerz_Computerzsys_Computerzsystemdriver_61F3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Computerzsys_Ludashisystemdriver_3867	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Computerzsys_Ludashisystemdriver_898E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Computerzsys_Ludashisystemdriver_C586	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Computerzsys_Ludashisystemdriver_E502	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Copyright_Advancedmalwareprotection_6F55	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Corsairmemoryinc_Corsairllaccess_Corsairllaccess_5FAD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Corsairmemoryinc_Corsairllaccess_Corsairllaccess_A334	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Corsairmemoryinc_Corsairllaccess_Corsairllaccess_F15A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cpuid_Cpuzsys_Cpuidservice_0D37	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cpuid_Cpuzsys_Cpuidservice_0E85	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cpuid_Cpuzsys_Cpuidservice_2298	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cpuid_Cpuzsys_Cpuidservice_34BE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cpuid_Cpuzsys_Cpuidservice_7710	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cpuid_Cpuzsys_Cpuidservice_8A07	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cpuid_Cpuzsys_Cpuidservice_A397	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Creativetechnologyinnovationcoltd_Ctiiosys_Ctiiodriverversion_X_2121	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Cyreninc_Amp_Cyrenamp_CBB8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Databaseharborsoftware_Sysinfodetectorxsys_Sysinfodetector_45E5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Dell_Dbutil_71FE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Dtresearchinc_Iomemsys_Iomemsys_3D23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Dtresearchinc_Iomemsys_Iomemsys_DD4A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytes_Elbycdio_Cdrtools_07AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytes_Elbycdio_Cdrtools_98EC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_033C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_0DC4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_1228	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_16B5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_1F15	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_2380	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_2FBB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_3E85	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_5148	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_5CFA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_7048	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_7CF7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_8137	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_828A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_82FB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_83A1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_8F68	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_9679	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_9CA5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_ADA4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_AF16	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_B9AD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_EEA5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_F42E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elaboratebytesag_Elbycdio_Cdrtools_F85E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Eldoscorporation_Elrawdsksys_Rawdisk_4744	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Elitegroupcomputersystems_Ecsiodriversys_Ecsiodriver_2705	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Entechtaiwan_Seasys_Softenginex_6CB5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Evgatechnologyinc_Windowsvistasmartiodevice_Windowsvistasmartiodevice_3C95	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Featureintegrationtechnologyinc_Fintekpciecom_81FB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Filseclabcorporation_Fildds_Filseclabdynamicdefensesystem_F8C0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Filseclabcorporation_Filnk_Filseclabdynamicdefensesystem_AE55	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Filseclabcorporation_Filwfp_Filseclabfirewall_490C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Fintekcorp_Fintekcorpfintekpcieuart_32BD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Fujitsulimited_Advdrvsys_Microsoftrwindowsroperatingsystem_04A8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Geintelligentplatformsinc_Gedevicedriver_Proficymachineedition_Build_CAC5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Generalelectriccompany_Gedevicedriver_Proficymachineedition_Build_A369	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Genitlkiwibenjaminxxxxx_Titidrv_Titidrvtiticatz_208E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Getactechnologycorporation_Mtcbsvsys_Getacsystemserviceprovider_0ABC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Getactechnologycorporation_Mtcbsvsys_Getacsystemserviceprovider_E602	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Getactechnologycorporation_Mtcbsvsys_Getacsystemserviceprovider_E6D1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Getactechnologycorporation_Mtcbsvsys_Getacsystemserviceprovider_EDBB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Gigabytetechnologycoltd_Gdrvsys_Gdrv_FF67	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_092D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_133E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_26C2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_81AA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_8B92	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Highresolutionenterpriseswwwhighrezcouk_Inpoutsys_Inpoutdriverversion_CFAB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Highresolutionenterpriseswwwhighrezcouk_Inpoutxsys_Inpoutxdriverversion_X_F581	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Hilschergesellschaftfrsystemaoutomationmbh_Physmemsys_Physicalmemoryaccessdriver_C299	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Hpdevelopmentcompany_Etdsuppsys_Hpetdidriverdll_F744	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Hpinc_Hpportioxsys_Hpportio_A468	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Hpinc_Hpportioxsys_Hpportio_C505	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Huawei_Hwosec_Huaweimatebook_B179	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Inferre_Hwdetectngsys_Hwdetectngsys_D456	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Innotekgmbh_Iprt_Virtualboxguestadditions_BBF5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Innotekgmbh_Vboxguest_Virtualboxguestadditions_9833	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Innotekgmbh_Vboxguest_Virtualboxguestadditions_D53F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Innotekgmbh_Vboxtapsys_Virtualboxhostinterfacenetworkingdriver_994F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Innotekgmbh_Vboxusbmonsys_Virtualboxusbmonitordriver_3D05	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Innotekgmbh_Vboxusbsys_Virtualboxusbdriver_C509	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Insydesoftware_Insydeflash_Insydeflashutilitybitdriver_CE0A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_0452	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_38D6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_6532	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_B9AE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_C628	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorp_Stdcdrvwssys_Selftestdatacollectordriverforwindowsx_70AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_19BF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_1F81	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_2D2C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_37C6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_4429	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_4D05	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_5F65	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_5F69	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_7CB4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_D1F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_F877	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Intelcorporation_Stdcdrvsys_Selftestdatacollector_3702	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Interfacecorporation_Cpxcsys_Gpcxc_1183	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Interfacecorporation_Cpxcsys_Gpcxcdiobmpcicpci_05C1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Interfacecorporation_Cpxcsys_Gpcxcdiobmpcicpci_6386	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Iobit_Iobitunlockersys_Iobitunlocker_2B33	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Iobit_Iobitunlockersys_Iobitunlocker_C79A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Iobit_Monitorsys_Advancedsystemcare_E4A7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Iobitinformationtechnology_Iobitunlockersys_Unlocker_F85C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Lenovogrouplimitedr_Lenovodiagnosticsdriversys_Lenovodiagnostics_F05B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Lgelectronicsinc_Lhasys_Microsoftwindowsoperatingsystem_23BA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Logitech_Lgcoretempsys_Lgcoretemp_E0CB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Logitechinc_Lvavsys_Logitechwebcamsoftware_E86C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Logmeininc_Lmiinfosys_Logmein_453B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Lowleveldriver_F941	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ludashicom_Computerzsys_0368	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ludashicom_Computerzsys_3F36	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ludashicom_Computerzsys_468B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ludashicom_Computerzsys_71C0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ludashicom_Computerzsys_7553	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ludashicom_Computerzsys_F14D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ludashicom_Computerzsys_FA77	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Marvintestsolutionsinc_Hwsys_Hw_5596	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Marvintestsolutionsinc_Hwsys_Hw_FD38	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Microfocus_Microfocusxtier_5351	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Microfocus_Microfocusxtier_95D5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Micsystechnologycoltd_Msiosys_Msiodriverversion_X_43BA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Micsystechnologycoltd_Msiosys_Msiodriverversion_X_AE42	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Micsystechnologycoltd_Msiosys_Msiodriverversion_X_CFCF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Mitactechnologycorporation_Mtcbsvsys_Mitacsystemserviceprovider_C9CF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Mitactechnologycorporation_Vdbsvsys_Mitacsystemserviceprovider_91AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_1DDF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_2BBE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_3070	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_3124	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_3D9E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_591B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_9254	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_98B7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_99F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_CC58	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_CF4B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_D0BD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibsys_Ntiolib_E839	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibxsys_Ntiolib_09BE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Msi_Ntiolibxsys_Ntiolibx_1E8B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Multitheftauto_Mtasanandreas_9F4C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Mydriverscom_Hwm_Drivergenius_08EB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ncrcorporation_Radhwmgrsys_Ncrcorporationhardwaremanagerdriver_7C8A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ncrcorporation_Radhwmgrsys_Ncrcorporationhardwaremanagerdriver_Dev_DF96	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Netfiltersdkcom_Lgdcatchersys_Netfiltersdk_0C42	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Netfiltersys_1265	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Netfiltersys_26D6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Netfiltersys_EDC6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Netfiltersys_F171	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nmscommunications_Cgkwinksys_Ctaccess_223F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_00B3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_1493	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_3B71	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_4CD8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_5381	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_5A66	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_66F8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_6C5A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_6CF1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_7627	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_834A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_8473	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_A153	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_A855	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_B50F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_C6FE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_DD4F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_F27F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtier_F629	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtierforwindows_V_7A2C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtierforwindows_V_C190	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Novellinc_Novellxtierforwindows_V_CA34	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_060D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_0FC0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_16AE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_2203	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_3CB1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_3D00	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_4D77	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_77DA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_848B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_87B4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_909F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_A475	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_AE3A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_AFDA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_B0DC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_D633	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_D7C9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_F4E5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Nvidiacorporation_Nvflash_Nvidiaflashdriver_AFDD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Openlibsysorg_Openlibsyssys_Openlibsys_9131	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Openlibsysorg_Openlibsyssys_Openlibsys_F060	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Openlibsysorg_Winringsys_Winring_11BD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Openlibsysorg_Winringsys_Winring_47EA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Oti_Otipcibussys_Kernelmodedrivertoaccessphysicalmemoryandports_4E3E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Overclockingtool_Atillksys_Overclockingtool_11A9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Panyazilimbilisimteknolojileriticltdsti_Paniosys_Paniolibrary_F596	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Panyazilimbilisimteknolojileriticltdsti_Panioxsys_Paniolibrary_6B83	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Panyazilimbilisimteknolojileriticltdsti_Panmonfltsys_Pancafemanager_7E01	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Panyazilimbilisimteknolojileriticltdsti_Panmonfltxsys_Pancafemanager_0650	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Pchuntersys_Pchunter_1B7F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Phoenixtechnologies_Agentsys_Driveragent_4045	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Phoenixtechnologiesltd_Phlashnt_Winphlash_65DB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Pinduoduoltdcorp_Vboxdrv_Pinduoduosecurevdi_9DAB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Powertool_Kevpsys_Powertool_7C0F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Proxydrvsys_Nn_0B20	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Proxydrvsys_Nn_C0E7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Radiantsystemsinc_Radhwmgrsys_Radiantsystemsinchardwaremanagerdriver_00C3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Radiantsystemsinc_Radhwmgrsys_Radiantsystemsinchardwaremanagerdriver_0F30	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Radiantsystemsinc_Radhwmgrsys_Radiantsystemsinchardwaremanagerdriver_7C79	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Razerinc_Rzpnk_Rzpnk_16E2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Razerinc_Rzpnk_Rzpnk_46D1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Razerinc_Rzpnk_Rzpnk_9724	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Razerinc_Rzpnk_Rzpnk_9E34	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Razerinc_Rzpnk_Rzpnk_AD8F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Razerinc_Rzpnk_Rzpnk_D7B7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Razerinc_Rzpnk_Rzpnk_F159	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfoisys_Hwinfoiakerneldriver_33C6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_1B17	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_4AC0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_4E54	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_6701	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_6E9E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_7125	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_76AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_7702	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_8DCE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_EC9B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_FF1C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiosys_Realtekiodriver_074A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiosys_Realtekiodriver_442C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiosys_Realtekiodriver_4ED2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiosys_Realtekiodriver_7133	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiosys_Realtekiodriver_8EF5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiosys_Realtekiodriver_A6F7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiosys_Realtekiodriver_DB71	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiowxsys_Realtekiodriver_082C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiowxsys_Realtekiodriver_32E1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiowxsys_Realtekiodriver_AB8F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realtek_Rtkiowxsys_Realtekiodriver_B205	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Realteksemiconductorcorp_Rtportsys_Realtekportio_FF32	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Rivetnetworksllc_Kfecodrvsys_Killertrafficcontrol_9A91	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Rivetnetworksllc_Kfecodrvsys_Killertrafficcontrol_B583	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Rweverything_Asrsetupdrvsys_Asrsetupdrvdriver_9D93	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Rweverything_Rwdrvsys_Rwdrvdriver_45BA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Rweverything_Rwdrvsys_Rweverythingreadwritedriver_2A65	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Safenetinc_Hostnt_Hostnt_07B6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_0EAB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_1284	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_1AAF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_3E27	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_496F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_881B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_B019	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_CBF7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sisoftware_Sandra_Sisoftwaresandra_D7C7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Ssmartsoftwaresolutionsgmbh_Sysdrvs_Sysdrvs_0E53	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sunmicrosystemsinc_Vboxdrvsys_Sunvirtualbox_R_7539	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sunmicrosystemsinc_Vboxdrvsys_Sunvirtualbox_R_7882	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sunmicrosystemsinc_Vboxdrvsys_Sunvirtualbox_R_C894	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sunmicrosystemsinc_Vboxtapsys_Virtualboxhostinterfacenetworkingdriver_CFA2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sunmicrosystemsinc_Vboxusbmonsys_Virtualboxusbmonitordriver_8A24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sunmicrosystemsinc_Vboxusbsys_Virtualboxusbdriver_5B26	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Supermicrocomputerinc_Phymem_Phymem_1963	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Supermicrocomputerinc_Superbmc_Superbmc_F843	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Symanteccorporation_Vproeventmonitorsys_Symanteceventmonitorsdriverdevelopmentedition_7877	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_7795	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_075D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_16A2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_1B00	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_30AB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_3FF3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_4408	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_6BFC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_7A48	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_88E2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_9B6A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_BCED	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_BDBC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tenasyscorporation_Rtifsys_Intime_3670	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tenasyscorporation_Rtifsys_Intime_4CE8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tenasyscorporation_Rtifsys_Intime_9399	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tenasyscorporation_Rtifsys_Intime_BA40	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tenasyscorporation_Rtifsys_Intime_EAE5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_18DE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_263E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_2A62	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_2B4C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_58A7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_9B2F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_A209	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_D0E2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_E05E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_E4EC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_EF6D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Toshibacorporation_Nchgbiosxsys_Toshibabiospackage_3143	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Toshibacorporation_Nchgbiosxsys_Toshibabiospackage_7D4C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Activeclean_A903	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Aegis_61BE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Aegis_A802	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Aegis_ADC1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Aegis_C901	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroaegis_3FA6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroaegis_4BC0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroaegis_ED2F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_0909	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_12ED	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_1C12	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_2AFD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_3854	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_3C42	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_3E1D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_478D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_4E37	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_5027	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_5192	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_62F5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_654C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_6FFD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_76E8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_7837	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_7C73	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_80A5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_818E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_97B3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_BCFC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_C082	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_CC68	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_D783	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_DBC6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_E3EF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_E4D9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_EC5F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_ECD0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_FDA9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmelsys_Trendmicroearlylaunchantimalwaredriver_D0EB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmelsys_Trendmicroearlylaunchantimalwaredriver_DD62	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Trendmicroinc_Tmelsys_Trendmicroearlylaunchantimalwaredriver_E505	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Vektortsecurityservice_Vboxdrv_Antidetectpublic_3724	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Vektortsecurityservice_Vboxdrv_Antidetectpublic_CFB7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Vektortsecurityservice_Vboxdrv_Antidetectpublicbyvektortrev_26F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Watchdogdevelopmentcomllc_Wsdkdsys_Wsdkd_6278	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrcodenamelonghornddkprovider_Cpudriver_Windowsrcodenamelonghornddkdriver_159E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrcodenamelonghornddkprovider_Cpuzsys_Windowsrcodenamelonghornddkdriver_4932	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrcodenamelonghornddkprovider_Cpuzsys_Windowsrcodenamelonghornddkdriver_EAA5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrcodenamelonghornddkprovider_Rtkiosys_Windowsrcodenamelonghornddkdriver_916C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrddkprovider_Gdrvsys_Windowsrddkdriver_F4FF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrddkprovider_Rtportsys_Windowsrddkdriver_6F80	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrddkprovider_Rtportsys_Windowsrddkdriver_C490	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrddkprovider_Rtportsys_Windowsrddkprovider_3C0A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrddkprovider_Rtportsys_Windowsrddkprovider_8FE4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrserverddkprovider_Cpuzsys_Windowsrserverddkdriver_3871	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrserverddkprovider_Cpuzsys_Windowsrserverddkdriver_BE68	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrserverddkprovider_Gdrvsys_Windowsrserverddkdriver_8899	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrserverddkprovider_Speedfansys_Windowsrserverddkdriver_22BE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Amifldrvsys_Windowsrwinddkdriver_38D8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Atlaccesssys_Windowsrwinddkdriver_0B57	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Cpuzsys_Windowsrwinddkdriver_1F4D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Cupfixerxsys_Windowsrwinddkdriver_8C74	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_1698	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_3AF9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_55B5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_9DEE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_B224	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_C35C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_F8D4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_FF55	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Lgdatacatchersys_Gameacc_07FB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Netfiltersys_Windowsrwinddkdriver_9DBC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Netfiltersys_Windowsrwinddkdriver_DB1D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Sbiosiosys_Samsungrbiosiodriver_1E24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Sbiosiosys_Samsungrbiosiodriver_B3D1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Vmdrvsys_Windowsrwinddkdriver_5C0B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowsrwinddkprovider_Wnbiossys_Windowsrwinddkdriver_530D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Windowswinowsdriverkitsprovider_Hwrwdrvsys_Hardwarereadwritedriver_21CC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Wisecleanercom_Wiseunlosys_Wiseunlo_786F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Wisecleanercom_Wiseunlosys_Wiseunlo_9D53	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Wistroncorporation_Wirwadrvsys_Wistronrwadriver_D8FC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Wj_Kprocesshacker_7021	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Wj_Kprocesshacker_C725	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Yyinc_Dianhu_80CB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Z_Computerzsys_Zwuqisystemdriver_61E7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_2BBC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_3C18	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_45F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_5439	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_7661	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_7CB5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_8FE9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_9A95	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_D7E0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_DE8F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Driver_Zemanaltd_Zam_E428	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_3F20	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Adlicesoftware_Truesight_Truesight_BFC2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_909D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_9B1A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_A130	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_AF10	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_F6CD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Amdryzenmasterdriversys_Amdryzenmasterservicedriver_FF96	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Aoddriversys_Amdoverdriveservicedriver_3C11	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Aoddriversys_Amdoverdriveservicedriver_81D5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevices_Aoddriversys_Amdoverdriveservicedriver_F4DC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevicesinc_Amdpowerprofilersys_Amduprof_0AF5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevicesinc_Pdfwkrnlsys_Usbcpowerdeliveryfirmwareupdatetoolkerneldriver_0CF8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevicesinc_Pdfwkrnlsys_Usbcpowerdeliveryfirmwareupdateutilitydriver_5DF6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Advancedmicrodevicesinc_Pdfwkrnlsys_Usbcpowerdeliveryfirmwareupdateutilitydriver_6945	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_0BD1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_1E94	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_88FB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_965D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_AD23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Almicosoftware_Sfdrvxsys_Speedfan_X_F4EE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Anticheatexpertcom_Acebase_Anticheatexpert_7326	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Arthurliberman_Alsysiosys_Alsysio_119C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Arthurliberman_Alsysiosys_Alsysio_7196	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Arthurliberman_Alsysiosys_Alsysio_7F37	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asmediatechnologyinc_Asmiosys_Asmediapcidriver_E465	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asrockincorporation_Asrautochkupddrvsys_Asrautochkupddrvdriver_2AA1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asrockincorporation_Asrautochkupddrvsys_Asrautochkupddrvdriver_4AE4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asrockincorporation_Asrdrvsys_Asrockiodriver_4D03	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asus_Asmmapsys_Atkgenericfunctionservice_025E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asustek_Driversys_Ectool_927C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asustekcomputerinc_Atsziosys_Atsziodriver_1A4F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asustekcomputerinc_Atsziosys_Atsziodriver_55A1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asustekcomputerinc_Atsziosys_Atsziodriver_FB6B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asustekcomputerinc_Bsdefsys_Supportsstsfssteeatftatcamfntamfnbvctvcbmftwc_5F5E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asustekcomputerinc_Eiosys_Asusvgakernelmodedriver_B175	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asustekcomputerinc_Eiosys_Asusvgakernelmodedriver_F4C7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Asustekcomputerinc_Iomapsys_Asuskernelmodedriverfornt_EA85	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Atitechnologiesinc_Atillksys_Atidiagnostics_AD40	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Atszio_Atsziodriver_673B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avaluetechnologyinc_Avalueio_Avalueio_A5A4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpot_Avastantivirus_1768	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpot_Avastantivirus_36E3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpot_Avastantivirus_3B6E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpot_Avastantivirus_4B52	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpot_Avastantivirus_7AD0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpot_Avastantivirus_AD8F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_0F17	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_1273	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_14AD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_1A42	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_2732	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_4DA0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_6500	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_86A1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_A5A5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_AAA3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_BE8D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_D5C4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_DCB8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswarpotsys_Avastantivirus_EBE2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Aswvmmsys_Avastantivirus_3650	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Ngiodriversys_Avastng_1072	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Ngiodriversys_Avastng_1A45	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Ngiodriversys_Avastng_42B3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Ngiodriversys_Avastng_5E3B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Ngiodriversys_Avastng_5FAE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Ngiodriversys_Avastng_7337	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Ngiodriversys_Avastng_85FD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avastsoftware_Ngiodriversys_Avastng_D0E4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_0B54	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_0CD4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_19D0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_2CE8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_34E0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_5BD4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpot_Avginternetsecuritysystem_9491	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_0B2A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_0F01	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_1023	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_1078	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_2594	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_6E0A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_6FB5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_7D43	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_8CFD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_9A54	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_A2F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_E2E7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Avgtechnologiesczsro_Aswarpotsys_Avginternetsecuritysystem_E452	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Biostargroup_Iodriver_Biostariodriver_1D03	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Biostargroup_Iodriver_Biostariodriver_D205	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Biostargroup_Iodriver_Biostariodriverfle_42E1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Bsmisys_5962	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_00D9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_0FC3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_348D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_3913	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_6D2C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_767E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_8D33	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_A97B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_BC45	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cn_Computerzsys_DEE3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Computerz_Computerzsys_Computerzsystemdriver_61F3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Computerzsys_Ludashisystemdriver_3867	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Computerzsys_Ludashisystemdriver_898E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Computerzsys_Ludashisystemdriver_C586	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Computerzsys_Ludashisystemdriver_E502	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Copyright_Advancedmalwareprotection_6F55	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Corsairmemoryinc_Corsairllaccess_Corsairllaccess_5FAD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Corsairmemoryinc_Corsairllaccess_Corsairllaccess_A334	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Corsairmemoryinc_Corsairllaccess_Corsairllaccess_F15A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cpuid_Cpuzsys_Cpuidservice_0D37	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cpuid_Cpuzsys_Cpuidservice_0E85	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cpuid_Cpuzsys_Cpuidservice_2298	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cpuid_Cpuzsys_Cpuidservice_34BE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cpuid_Cpuzsys_Cpuidservice_7710	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cpuid_Cpuzsys_Cpuidservice_8A07	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cpuid_Cpuzsys_Cpuidservice_A397	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Creativetechnologyinnovationcoltd_Ctiiosys_Ctiiodriverversion_X_2121	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Cyreninc_Amp_Cyrenamp_CBB8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Databaseharborsoftware_Sysinfodetectorxsys_Sysinfodetector_45E5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Dell_Dbutil_71FE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Dtresearchinc_Iomemsys_Iomemsys_3D23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Dtresearchinc_Iomemsys_Iomemsys_DD4A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytes_Elbycdio_Cdrtools_07AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytes_Elbycdio_Cdrtools_98EC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_033C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_0DC4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_1228	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_16B5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_1F15	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_2380	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_2FBB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_3E85	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_5148	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_5CFA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_7048	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_7CF7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_8137	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_828A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_82FB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_83A1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_8F68	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_9679	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_9CA5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_ADA4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_AF16	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_B9AD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_EEA5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_F42E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elaboratebytesag_Elbycdio_Cdrtools_F85E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Eldoscorporation_Elrawdsksys_Rawdisk_4744	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Elitegroupcomputersystems_Ecsiodriversys_Ecsiodriver_2705	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Entechtaiwan_Seasys_Softenginex_6CB5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Evgatechnologyinc_Windowsvistasmartiodevice_Windowsvistasmartiodevice_3C95	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Featureintegrationtechnologyinc_Fintekpciecom_81FB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Filseclabcorporation_Fildds_Filseclabdynamicdefensesystem_F8C0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Filseclabcorporation_Filnk_Filseclabdynamicdefensesystem_AE55	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Filseclabcorporation_Filwfp_Filseclabfirewall_490C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Fintekcorp_Fintekcorpfintekpcieuart_32BD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Fujitsulimited_Advdrvsys_Microsoftrwindowsroperatingsystem_04A8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Geintelligentplatformsinc_Gedevicedriver_Proficymachineedition_Build_CAC5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Generalelectriccompany_Gedevicedriver_Proficymachineedition_Build_A369	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Genitlkiwibenjaminxxxxx_Titidrv_Titidrvtiticatz_208E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Getactechnologycorporation_Mtcbsvsys_Getacsystemserviceprovider_0ABC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Getactechnologycorporation_Mtcbsvsys_Getacsystemserviceprovider_E602	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Getactechnologycorporation_Mtcbsvsys_Getacsystemserviceprovider_E6D1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Getactechnologycorporation_Mtcbsvsys_Getacsystemserviceprovider_EDBB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Gigabytetechnologycoltd_Gdrvsys_Gdrv_FF67	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_092D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_133E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_26C2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_81AA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Gigabytetechnologycoltd_Gdrvsys_Gigabytesoftwaredriver_8B92	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Highresolutionenterpriseswwwhighrezcouk_Inpoutsys_Inpoutdriverversion_CFAB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Highresolutionenterpriseswwwhighrezcouk_Inpoutxsys_Inpoutxdriverversion_X_F581	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Hilschergesellschaftfrsystemaoutomationmbh_Physmemsys_Physicalmemoryaccessdriver_C299	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Hpdevelopmentcompany_Etdsuppsys_Hpetdidriverdll_F744	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Hpinc_Hpportioxsys_Hpportio_A468	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Hpinc_Hpportioxsys_Hpportio_C505	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Huawei_Hwosec_Huaweimatebook_B179	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Inferre_Hwdetectngsys_Hwdetectngsys_D456	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Innotekgmbh_Iprt_Virtualboxguestadditions_BBF5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Innotekgmbh_Vboxguest_Virtualboxguestadditions_9833	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Innotekgmbh_Vboxguest_Virtualboxguestadditions_D53F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Innotekgmbh_Vboxtapsys_Virtualboxhostinterfacenetworkingdriver_994F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Innotekgmbh_Vboxusbmonsys_Virtualboxusbmonitordriver_3D05	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Innotekgmbh_Vboxusbsys_Virtualboxusbdriver_C509	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Insydesoftware_Insydeflash_Insydeflashutilitybitdriver_CE0A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_0452	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_38D6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_6532	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_B9AE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Insydesoftwarecorp_Segwindrvxsys_Segwindowsdriverx_C628	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorp_Stdcdrvwssys_Selftestdatacollectordriverforwindowsx_70AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_19BF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_1F81	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_2D2C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_37C6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_4429	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_4D05	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_5F65	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_5F69	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_7CB4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_D1F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Iqvwsys_Intelriqvwsys_F877	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Intelcorporation_Stdcdrvsys_Selftestdatacollector_3702	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Interfacecorporation_Cpxcsys_Gpcxc_1183	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Interfacecorporation_Cpxcsys_Gpcxcdiobmpcicpci_05C1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Interfacecorporation_Cpxcsys_Gpcxcdiobmpcicpci_6386	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Iobit_Iobitunlockersys_Iobitunlocker_2B33	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Iobit_Iobitunlockersys_Iobitunlocker_C79A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Iobit_Monitorsys_Advancedsystemcare_E4A7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Iobitinformationtechnology_Iobitunlockersys_Unlocker_F85C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Lenovogrouplimitedr_Lenovodiagnosticsdriversys_Lenovodiagnostics_F05B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Lgelectronicsinc_Lhasys_Microsoftwindowsoperatingsystem_23BA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Logitech_Lgcoretempsys_Lgcoretemp_E0CB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Logitechinc_Lvavsys_Logitechwebcamsoftware_E86C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Logmeininc_Lmiinfosys_Logmein_453B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Lowleveldriver_F941	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ludashicom_Computerzsys_0368	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ludashicom_Computerzsys_3F36	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ludashicom_Computerzsys_468B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ludashicom_Computerzsys_71C0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ludashicom_Computerzsys_7553	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ludashicom_Computerzsys_F14D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ludashicom_Computerzsys_FA77	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Marvintestsolutionsinc_Hwsys_Hw_5596	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Marvintestsolutionsinc_Hwsys_Hw_FD38	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Microfocus_Microfocusxtier_5351	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Microfocus_Microfocusxtier_95D5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Micsystechnologycoltd_Msiosys_Msiodriverversion_X_43BA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Micsystechnologycoltd_Msiosys_Msiodriverversion_X_AE42	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Micsystechnologycoltd_Msiosys_Msiodriverversion_X_CFCF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Mitactechnologycorporation_Mtcbsvsys_Mitacsystemserviceprovider_C9CF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Mitactechnologycorporation_Vdbsvsys_Mitacsystemserviceprovider_91AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_1DDF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_2BBE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_3070	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_3124	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_3D9E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_591B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_9254	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_98B7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_99F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_CC58	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_CF4B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_D0BD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibsys_Ntiolib_E839	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibxsys_Ntiolib_09BE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Msi_Ntiolibxsys_Ntiolibx_1E8B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Multitheftauto_Mtasanandreas_9F4C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Mydriverscom_Hwm_Drivergenius_08EB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ncrcorporation_Radhwmgrsys_Ncrcorporationhardwaremanagerdriver_7C8A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ncrcorporation_Radhwmgrsys_Ncrcorporationhardwaremanagerdriver_Dev_DF96	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Netfiltersdkcom_Lgdcatchersys_Netfiltersdk_0C42	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Netfiltersys_1265	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Netfiltersys_26D6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Netfiltersys_EDC6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Netfiltersys_F171	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nmscommunications_Cgkwinksys_Ctaccess_223F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_00B3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_1493	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_3B71	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_4CD8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_5381	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_5A66	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_66F8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_6C5A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_6CF1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_7627	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_834A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_8473	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_A153	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_A855	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_B50F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_C6FE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_DD4F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_F27F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtier_F629	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtierforwindows_V_7A2C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtierforwindows_V_C190	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Novellinc_Novellxtierforwindows_V_CA34	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_060D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_0FC0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_16AE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_2203	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_3CB1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_3D00	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_4D77	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_77DA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_848B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_87B4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_909F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_A475	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_AE3A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_AFDA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_B0DC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_D633	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_D7C9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorp_Nvoclocksys_Nvidiasystemutilitydriver_F4E5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Nvidiacorporation_Nvflash_Nvidiaflashdriver_AFDD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Openlibsysorg_Openlibsyssys_Openlibsys_9131	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Openlibsysorg_Openlibsyssys_Openlibsys_F060	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Openlibsysorg_Winringsys_Winring_11BD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Openlibsysorg_Winringsys_Winring_47EA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Oti_Otipcibussys_Kernelmodedrivertoaccessphysicalmemoryandports_4E3E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Overclockingtool_Atillksys_Overclockingtool_11A9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Panyazilimbilisimteknolojileriticltdsti_Paniosys_Paniolibrary_F596	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Panyazilimbilisimteknolojileriticltdsti_Panioxsys_Paniolibrary_6B83	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Panyazilimbilisimteknolojileriticltdsti_Panmonfltsys_Pancafemanager_7E01	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Panyazilimbilisimteknolojileriticltdsti_Panmonfltxsys_Pancafemanager_0650	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Pchuntersys_Pchunter_1B7F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Phoenixtechnologies_Agentsys_Driveragent_4045	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Phoenixtechnologiesltd_Phlashnt_Winphlash_65DB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Pinduoduoltdcorp_Vboxdrv_Pinduoduosecurevdi_9DAB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Powertool_Kevpsys_Powertool_7C0F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Proxydrvsys_Nn_0B20	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Proxydrvsys_Nn_C0E7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Radiantsystemsinc_Radhwmgrsys_Radiantsystemsinchardwaremanagerdriver_00C3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Radiantsystemsinc_Radhwmgrsys_Radiantsystemsinchardwaremanagerdriver_0F30	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Radiantsystemsinc_Radhwmgrsys_Radiantsystemsinchardwaremanagerdriver_7C79	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Razerinc_Rzpnk_Rzpnk_16E2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Razerinc_Rzpnk_Rzpnk_46D1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Razerinc_Rzpnk_Rzpnk_9724	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Razerinc_Rzpnk_Rzpnk_9E34	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Razerinc_Rzpnk_Rzpnk_AD8F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Razerinc_Rzpnk_Rzpnk_D7B7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Razerinc_Rzpnk_Rzpnk_F159	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfoisys_Hwinfoiakerneldriver_33C6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_1B17	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_4AC0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_4E54	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_6701	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_6E9E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_7125	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_76AF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_7702	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_8DCE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_EC9B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realixtm_Hwinfosys_Hwinfokerneldriver_FF1C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiosys_Realtekiodriver_074A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiosys_Realtekiodriver_442C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiosys_Realtekiodriver_4ED2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiosys_Realtekiodriver_7133	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiosys_Realtekiodriver_8EF5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiosys_Realtekiodriver_A6F7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiosys_Realtekiodriver_DB71	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiowxsys_Realtekiodriver_082C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiowxsys_Realtekiodriver_32E1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiowxsys_Realtekiodriver_AB8F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realtek_Rtkiowxsys_Realtekiodriver_B205	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Realteksemiconductorcorp_Rtportsys_Realtekportio_FF32	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Rivetnetworksllc_Kfecodrvsys_Killertrafficcontrol_9A91	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Rivetnetworksllc_Kfecodrvsys_Killertrafficcontrol_B583	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Rweverything_Asrsetupdrvsys_Asrsetupdrvdriver_9D93	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Rweverything_Rwdrvsys_Rwdrvdriver_45BA	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Rweverything_Rwdrvsys_Rweverythingreadwritedriver_2A65	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Safenetinc_Hostnt_Hostnt_07B6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_0EAB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_1284	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_1AAF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_3E27	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_496F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_881B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_B019	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_CBF7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sisoftware_Sandra_Sisoftwaresandra_D7C7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Ssmartsoftwaresolutionsgmbh_Sysdrvs_Sysdrvs_0E53	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sunmicrosystemsinc_Vboxdrvsys_Sunvirtualbox_R_7539	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sunmicrosystemsinc_Vboxdrvsys_Sunvirtualbox_R_7882	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sunmicrosystemsinc_Vboxdrvsys_Sunvirtualbox_R_C894	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sunmicrosystemsinc_Vboxtapsys_Virtualboxhostinterfacenetworkingdriver_CFA2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sunmicrosystemsinc_Vboxusbmonsys_Virtualboxusbmonitordriver_8A24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sunmicrosystemsinc_Vboxusbsys_Virtualboxusbdriver_5B26	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Supermicrocomputerinc_Phymem_Phymem_1963	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Supermicrocomputerinc_Superbmc_Superbmc_F843	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Symanteccorporation_Vproeventmonitorsys_Symanteceventmonitorsdriverdevelopmentedition_7877	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_7795	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_075D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_16A2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_1B00	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_30AB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_3FF3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_4408	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_6BFC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_7A48	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_88E2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_9B6A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_BCED	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Sysinternalswwwsysinternalscom_Procexpsys_Processexplorer_BDBC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tenasyscorporation_Rtifsys_Intime_3670	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tenasyscorporation_Rtifsys_Intime_4CE8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tenasyscorporation_Rtifsys_Intime_9399	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tenasyscorporation_Rtifsys_Intime_BA40	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tenasyscorporation_Rtifsys_Intime_EAE5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_18DE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_263E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_2A62	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_2B4C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_58A7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_9B2F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_A209	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_D0E2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_E05E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_E4EC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Tgsoftsas_Viragtsys_Viritagentsystem_EF6D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Toshibacorporation_Nchgbiosxsys_Toshibabiospackage_3143	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Toshibacorporation_Nchgbiosxsys_Toshibabiospackage_7D4C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Activeclean_A903	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Aegis_61BE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Aegis_A802	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Aegis_ADC1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Aegis_C901	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroaegis_3FA6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroaegis_4BC0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroaegis_ED2F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_0909	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_12ED	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_1C12	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_2AFD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_3854	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_3C42	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_3E1D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_478D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_4E37	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_5027	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_5192	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_62F5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_654C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_6FFD	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_76E8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_7837	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_7C73	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_80A5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_818E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_97B3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_BCFC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_C082	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_CC68	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_D783	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_DBC6	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_E3EF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_E4D9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_EC5F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_ECD0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmcommsys_Trendmicroeyes_FDA9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmelsys_Trendmicroearlylaunchantimalwaredriver_D0EB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmelsys_Trendmicroearlylaunchantimalwaredriver_DD62	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Trendmicroinc_Tmelsys_Trendmicroearlylaunchantimalwaredriver_E505	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Vektortsecurityservice_Vboxdrv_Antidetectpublic_3724	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Vektortsecurityservice_Vboxdrv_Antidetectpublic_CFB7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Vektortsecurityservice_Vboxdrv_Antidetectpublicbyvektortrev_26F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Watchdogdevelopmentcomllc_Wsdkdsys_Wsdkd_6278	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrcodenamelonghornddkprovider_Cpudriver_Windowsrcodenamelonghornddkdriver_159E	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrcodenamelonghornddkprovider_Cpuzsys_Windowsrcodenamelonghornddkdriver_4932	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrcodenamelonghornddkprovider_Cpuzsys_Windowsrcodenamelonghornddkdriver_EAA5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrcodenamelonghornddkprovider_Rtkiosys_Windowsrcodenamelonghornddkdriver_916C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrddkprovider_Gdrvsys_Windowsrddkdriver_F4FF	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrddkprovider_Rtportsys_Windowsrddkdriver_6F80	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrddkprovider_Rtportsys_Windowsrddkdriver_C490	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrddkprovider_Rtportsys_Windowsrddkprovider_3C0A	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrddkprovider_Rtportsys_Windowsrddkprovider_8FE4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrserverddkprovider_Cpuzsys_Windowsrserverddkdriver_3871	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrserverddkprovider_Cpuzsys_Windowsrserverddkdriver_BE68	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrserverddkprovider_Gdrvsys_Windowsrserverddkdriver_8899	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrserverddkprovider_Speedfansys_Windowsrserverddkdriver_22BE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Amifldrvsys_Windowsrwinddkdriver_38D8	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Atlaccesssys_Windowsrwinddkdriver_0B57	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Cpuzsys_Windowsrwinddkdriver_1F4D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Cupfixerxsys_Windowsrwinddkdriver_8C74	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_1698	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_3AF9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_55B5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_9DEE	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_B224	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_C35C	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_F8D4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Dcprotectsys_Dcprotectrwinxdriver_FF55	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Lgdatacatchersys_Gameacc_07FB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Netfiltersys_Windowsrwinddkdriver_9DBC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Netfiltersys_Windowsrwinddkdriver_DB1D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Sbiosiosys_Samsungrbiosiodriver_1E24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Sbiosiosys_Samsungrbiosiodriver_B3D1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Vmdrvsys_Windowsrwinddkdriver_5C0B	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowsrwinddkprovider_Wnbiossys_Windowsrwinddkdriver_530D	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Windowswinowsdriverkitsprovider_Hwrwdrvsys_Hardwarereadwritedriver_21CC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Wisecleanercom_Wiseunlosys_Wiseunlo_786F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Wisecleanercom_Wiseunlosys_Wiseunlo_9D53	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Wistroncorporation_Wirwadrvsys_Wistronrwadriver_D8FC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Wj_Kprocesshacker_7021	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Wj_Kprocesshacker_C725	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Yyinc_Dianhu_80CB	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Z_Computerzsys_Zwuqisystemdriver_61E7	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_2BBC	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_3C18	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_45F4	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_5439	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_7661	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_7CB5	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_8FE9	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_9A95	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_D7E0	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_DE8F	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_VULN_Renamed_Driver_Zemanaltd_Zam_E428	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUA_WIN_XMRIG_CryptoCoin_Miner_Dec20	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUP_ComputraceAgent	ASERT - Arbor Networks (slightly modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PUP_InstallRex_AntiFWb	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Pack_InjectT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Partial_Implant_ID	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PassCV_Sabre_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassCV_Sabre_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassCV_Sabre_Malware_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassCV_Sabre_Malware_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassCV_Sabre_Malware_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassCV_Sabre_Malware_Excalibur_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassCV_Sabre_Malware_Signing_Cert	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassCV_Sabre_Tool_NTScan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassSniffer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PassSniffer_zip_Folder_readme	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PasswordPro_NTLM_DLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PasswordReminder	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PasswordsPro	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Pastebin_Webshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Payload_Exe2Hex	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Pc_pc2015	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Pc_rejoice	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Pc_xai	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Persistence_Agent_MacOS	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PhpShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Phyton_Shell_py	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Ping_Command_in_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Pirpi_1609_A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Pirpi_1609_B	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PlugX_J16_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PlugX_J16_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PlugX_NvSmartMax_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoS_Malware_MalumPOS	Trend Micro, Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PoS_Malware_MalumPOS_Config	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoisonIvy_Generic_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoisonIvy_RAT_ssMUIDLL	Florian Roth (Nextron Systems) (with the help of yarGen and Binarly)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PoisonIvy_Sample_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoisonIvy_Sample_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoisonIvy_Sample_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoisonIvy_Sample_APT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoisonIvy_Sample_APT_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoisonIvy_Sample_APT_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoisonIvy_Sample_APT_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PortRacer	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PoseidonGroup_MalDoc_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoseidonGroup_MalDoc_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PoseidonGroup_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShdll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_Case_Anomaly	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_Emp_Eval_Jul17_A1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_Emp_Eval_Jul17_A2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_ISESteroids_Obfuscation	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_JAB_B64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_Mal_HackTool_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_Suite_Eidolon	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_Suite_Hacktools_Gen_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PowerShell_Susp_Parameter_Combo	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PowerShell_in_Word_Doc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Powerkatz_DLL_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Powershell_Attack_Scripts	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Powershell_Netcat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PrikormkaDropper	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PrikormkaEarlyVersion	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PrikormkaModule	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ProPort_zip_Folder_ProPort	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ProcessInjector_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ProjectM_CrimsonDownloader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ProjectM_DarkComet_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Pupy_Backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
PwDump	Marc Stroebel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
PwDump_B	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
QQBrowser	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
QQ_zip_Folder_QQ	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
QuarksPwDump_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Quasar_RAT_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Quasar_RAT_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Quasar_RAT_Jan18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RAT_AAR	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Adzok	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Ap0calypse	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Arcom	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Bandook	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_BlackNix	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_BlackShades	Brian Wallace (@botnet_hunter)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_BlueBanana	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Bozok	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_ClientMesh	Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_CyberGate	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_DarkComet	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_DarkRAT	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Greame	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_HawkEye	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Imminent	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Infinity	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_JavaDropper	Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_LostDoor	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_LuminosityLink	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_LuxNet	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_NanoCore	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_NetWire	Kevin Breen <kevin@techanarchy.net> & David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Pandora	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Paradox	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Plasma	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_PoisonIvy	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_PredatorPain	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Punisher	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_PythoRAT	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_QRat	Kevin Breen @KevTheHermit	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Sakula	Airbus Defence and Space Cybersecurity CSIRT - Yoann Francou / NCC Group David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_ShadowTech	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_SmallNet	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_SpyGate	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Sub7Nation	Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Vertex	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_VirusRat	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_Xtreme	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_adWind	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_njRat	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RAT_unrecom	Kevin Breen <kevin@techanarchy.net>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RDP_Brute_Strings	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
REDLEAVES_CoreImplant_UniqueStrings	USG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
REDLEAVES_DroppedFile_ImplantLoader_Starburn	USG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
REDLEAVES_DroppedFile_ObfuscatedShellcodeAndRAT_handkerchief	USG	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
REGEORG_Tuneller_generic	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ROKRAT_Dropper_Nov17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ROKRAT_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ROKRAT_Nov17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RUAG_APT_Malware_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RUAG_Bot_Config_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RUAG_Cobra_Config_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RUAG_Cobra_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RUAG_Exfil_Config_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RUAG_Tavdig_Malformed_Executable	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Radmin_Hash	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RangeScan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ransom_LockerGoga_Mar19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ReactOS_cmd_valid	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Reader_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Reaver3_Malware_Nov17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Reaver3_Malware_Nov17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Reaver3_Malware_Nov17_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ReconCommands_in_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Recon_Commands_Windows_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ReflectiveLoader	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Reflective_DLL_Loader_Aug17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Reflective_DLL_Loader_Aug17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Reflective_DLL_Loader_Aug17_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Reflective_DLL_Loader_Aug17_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Regin_APT_KernelDriver_Generic_A	@Malwrsignatures - included in APT Scanner THOR	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Regin_APT_KernelDriver_Generic_B	@Malwrsignatures - included in APT Scanner THOR	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Regin_APT_KernelDriver_Generic_C	@Malwrsignatures - included in APT Scanner THOR	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Regin_Related_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Regin_Sample_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Regin_Sample_2	@MalwrSignatures	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Regin_Sample_3	@Malwrsignatures	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Regin_Sample_Set_1	@MalwrSignatures	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Regin_Sample_Set_2	@MalwrSignatures	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Regin_sig_svcsstat	@MalwrSignatures	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Rehashed_RAT_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Rehashed_RAT_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Rehashed_RAT_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Release_dllTest	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RemCom_RemoteCommandExecution	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RemExp_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Rem_View_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RemoteExec_Tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Reveal_MemoryCredentials	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RevengeRAT_Sep17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RkNTLoad	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RocketKitten_Keylogger	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Rombertik_CarbonGrabber	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Rombertik_CarbonGrabber_Builder	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Rombertik_CarbonGrabber_Builder_Server	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Rombertik_CarbonGrabber_Panel	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Rombertik_CarbonGrabber_Panel_InstallScript	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RottenPotato_Potato	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
RoyalRoad_RTF	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RoyalRoad_RTF_v7	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RoyalRoad_code_pattern1	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RoyalRoad_code_pattern2	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RoyalRoad_code_pattern3	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RoyalRoad_code_pattern4ab	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RoyalRoad_code_pattern4ce	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RoyalRoad_code_pattern4d	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
RoyalRoad_encode_in_RTF	nao_sec	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SAM_Hive_Backup	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SCT_Scriptlet_in_Temp_Inet_Files	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SFXRAR_Acrotray	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SHIFU_Banking_Trojan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SLServer_campaign_code	Matt Brooks, @cmatthewbrooks	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SLServer_command_and_control	Matt Brooks, @cmatthewbrooks	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SLServer_dialog_remains	Matt Brooks, @cmatthewbrooks / modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SLServer_mutex	Matt Brooks, @cmatthewbrooks	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SLServer_unknown_string	Matt Brooks, @cmatthewbrooks	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SNOWGLOBE_Babar_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SQLCracker	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SQLMap	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SQLTools	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
STNC_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
STUXSHOP_OSCheck	Silas Cutler (havex@Chronicle.Security)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
STUXSHOP_config	JAG-S (turla@chronicle.security)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_3CX_App_Signed_Binary_Mar23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_3CX_MSI_Signed_Binary_Mar23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_AES_Key_in_MySql_History	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_ANOMALY_Teams_Binary_Nov23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_APT_3CX_Regtrans_Anomaly_Apr23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_APT_MAL_NK_3CX_Malicious_Samples_Mar23_1	X__Junior, Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_APT_MAL_VEILEDSIGNAL_Backdoor_Apr23	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ASPX_PossibleDropperArtifact_Aug21	Max Altgelt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_AdobePDF_Bitmap_Executable	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_AdobePDF_SFX_Bitmap_Combo_Executable	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_AnyDesk_Compromised_Certificate_Jan24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_AnyDesk_Compromised_Certificate_Jan24_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_AnyDesk_Compromised_Certificate_Jan24_3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_AppDomainInjection_Keyword_May26	Jonathan Peters (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Archive_Phishing_Attachment_Characteristics_Jun22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_BAT2EXE_BDargo_Converted_BAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_BAT_Aux_Jan20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_BAT_OBFUSC_Jul24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_BAT_OBFUSC_Jul24_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_BAT_OBFUSC_Jul24_3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Bad_PDF	Florian Roth (Nextron Systems), Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Base64_Encoded_Exploit_Indicators_Dec21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Base64_Encoded_Hacktool_Dev	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Base64_Encoded_Hex_Encoded_Code	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Blocked_Download_Proxy_Replacement_Jan23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_CMD_Var_Expansion	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Claude_Redacted_Thinking_Magic_String_Jan26_1	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Claude_Redacted_Thinking_Magic_String_Jan26_2	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Claude_Refusal_Magic_String_Jan26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Command_Line_Combos_Feb24_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_DLL_SideLoading_Characteristics_Feb26	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_DOC_LNK_in_ZIP	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_DOC_RTF_ExternalResource_EMAIL_Jun22	Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_DeviceGuard_WDS_Evasion	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Disable_ETW_Jun20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Doc_RTF_ExternalResource_May22	Tobias Michalski, Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Doc_RTF_OLE2Link_EMAIL_Jun22	Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Doc_RTF_OLE2Link_Jun22	Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Doc_WindowsInstaller_Call_Feb22_1	Nils Kuhnert	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Doc_WordXMLRels_May22	Tobias Michalski, Christian Burkard, Wojciech Cieslak	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Double_Base64_Encoded_Executable	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_DropperBackdoor_Keywords	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ELF_Invalid_Version	@shellcromancer	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ELF_LNX_UPX_Compressed_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ELF_SPARC_Hunting_SBZ_ModuleStruct	netadr, modified by Florian Roth for FP reduction reasons	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ELF_SPARC_Hunting_SBZ_Obfuscation	netadr, modified by Florian Roth to avoid elf module import	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ELF_SPARC_Hunting_SBZ_UniqueStrings	netadr, modified by Florian Roth for performance reasons	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ELF_Tor_Client	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_ENV_Folder_Root_File_Jan23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ESXiArgs_Endpoint_Conf_Aug23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_Cleo_Exploitation_Log_Indicators_Dec24_1	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_Cleo_Exploitation_Log_Indicators_Dec24_2	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_Cleo_Exploitation_XML_Indicators_Dec24_1	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_Cleo_Exploitation_XML_Indicators_Dec24_2	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_CommVault_CVE_2025_57791_Artifact_Aug25	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_CommVault_CVE_2025_57791_Aug25_1	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_CommVault_CVE_2025_57791_Aug25_2	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_Confluence_RCE_CVE_2021_26084_Indicators_Sep21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_JAR_Indicators_Dec24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_LIBCUE_CVE_2023_43641_Oct23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_LNX_CUPS_CVE_2024_47177_Sep24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_Msg_CVE_2023_23397_Mar23	delivr.to, modified by Florian Roth, Nils Kuhnert, Arnim Rupp, marcin@ulikowski.pl	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_OBFUSC_Dec21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Email_Redirection_Spoofing_Feb25	Jonathan Peters (cod3nym)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Email_Suspicious_OneNote_Attachment_Jan23_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Email_Suspicious_OneNote_Attachment_Jan23_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_EnableContent_String_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Encoded_Discord_Attachment_Oct21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Excel4Macro_AutoOpen	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Excel_IQY_RemoteURI_Syntax	Nick Carr	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_FScan_Port_Scanner_Output_Jun23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Fake_AMSI_DLL_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Fake_AMSI_DLL_Jun23_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Four_Byte_XOR_PE_And_MZ	Wesley Shields <wxs@atarininja.org>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_GIF_Anomalies	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_GObfuscate_May21	James Quinn, Paul Hager (merged with new similar pattern)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Hunt_EvtMuteHook_Memory	SBousseaden	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_HxD_Icon_Anomaly_May23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_IIS_Config_ProxyShell_Artifacts	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_IIS_Config_VirtualDir	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_INDICATOR_RTF_MalVer_Objects	ditekSHen	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Imphash_Mar23_2	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License	https://github.com/Neo23x0/signature-base
SUSP_Imphash_Mar23_3	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License	https://github.com/Neo23x0/signature-base
SUSP_Imphash_PassRevealer_PY_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_JAVA_Class_Allatori_Obfuscator_Aug25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_JAVA_Class_with_VBS_Content	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_JAVA_Loader_Indicators_Aug25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_JDNIExploit_Error_Indicators_Dec21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_JDNIExploit_Indicators_Dec21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_JS_Dropper_Mar26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_JS_NPM_SetupScript_Nov25	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_JS_NPM_Sha1_Hulud_Nov25	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Just_EICAR	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Katz_Log_May25	MalGamy	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Katz_PDB	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Keepass_CVE_2023_24055_Jan23	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Known_Type_Cloaked_as_JPG	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNK_Big_Link_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNK_Embedded_WordDoc	Greg Lesnewich	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNK_File_AppData_Roaming	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_LNK_File_PathTraversal	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_LNK_Follina_Jun22	Paul Hager	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNK_SmallScreenSize	Greg Lesnewich	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNK_SuspiciousCommands	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNK_Suspicious_Folders_Jan25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNK_lnkfileoverRFC	@Grotezinfosec, modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_ARCH_ALPM_Hook_Jun26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_ARCH_Install_Hook_Jun26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_ARCH_PKGBUILD_NPM_Dependency_Jun26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_ARCH_SRCINFO_NPM_Dependency_Jun26	Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_Base64_Download_Exec_Apr24	Paul Hager	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_Base64_Exec_Apr24	Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_ByteEncoder_Jan25	MalGamy (Nextron System)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_Linux_Malware_Indicators_Aug20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_SH_CryptoMiner_Indicators_Dec20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_SH_Disk_Wiper_Script_Jun25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_Sindoor_DesktopFile_Aug25	Pezier Pierre-Henri	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_Sindoor_ELF_Obfuscation_Aug25	Pezier Pierre-Henri	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_LNX_StackString_Technique_Jan25	MalGamy (Nextron System)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_MAL_EXFIL_Stealer_Output_Characteristics_Sep22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_MAL_SigningCert_Feb24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_MacOS_Plist_Suspicious	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Macro_Sheet_Obfuscated_Char	DissectMalware	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Macro_StarOffice	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_MalDoc_ExcelMacro	James Quinn	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Microsoft_7z_SFX_Combo	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Microsoft_Copyright_String_Anomaly_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_Microsoft_RAR_SFX_Combo	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Modified_SystemExeFileName_in_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Msdt_Artefact_Jun22_2	Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_NET_Msil_Suspicious_Use_StrReverse	dr4k0nia, modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_NK_MAL_M_Hunting_POOLRAT	Mandiant	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_NVIDIA_LAPSUS_Leak_Compromised_Cert_Mar22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Netsh_PortProxy_Command	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Nimbus_Manticore_PDF_Indicators_May26	Jonathan Peters (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_NullSoftInst_Combo_Oct20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_OBFUSC_Indiators_XML_OfficeDoc_Sep21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_OBFUSC_Indiators_XML_OfficeDoc_Sep21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_OBFUSC_JS_Sept21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_OBFUSC_PowerShell_True_Jun20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_OBFUSC_SH_Indicators_Mar24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Obfuscted_PowerShell_Code	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_OfficeDoc_VBA_Base64Decode	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Office_Dropper_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_OneNote_Embedded_FileDataStoreObject_Type_Jan23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_OneNote_Embedded_FileDataStoreObject_Type_Jan23_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PDB_CN_Threat_Actor_May19_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PDB_Path_Keywords	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PDB_Strings_Keylogger_Backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_PE_Compromised_Certificate_Feb25	Jonathan Peters	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PE_Contains_Encrypted_Executable_May26	Jonathan Peters (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PE_Discord_Attachment_Oct21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PE_Signed_by_Suspicious_Entitiy_Mar23	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License	https://github.com/Neo23x0/signature-base
SUSP_PS1_Combo_TransferSH_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PS1_FromBase64String_Content_Indicator	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PS1_JAB_Pattern_Jun22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PS1_Msdt_Execution_May22	Nasreddine Bencherchali, Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PY_Import_Statement_Apr24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PY_PYInstaller_Swiper_Jun25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PY_Shell_Spawn_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Password_XLS_Encrypted	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Password_XLS_Unencrypted	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Patcher_Keygen_Indicators_Jun15	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_PiratedOffice_2007	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PowerShell_Caret_Obfuscation_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PowerShell_IEX_Download_Combo	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_PowerShell_String_K32_RemProcess	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SUSP_Powershell_ShellCommand_May18_1	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Putty_Unnormal_Size	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_QakBot_Uninstaller_FBI_Aug23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Qakbot_Uninstaller_ShellCode_Aug23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_RANSOMWARE_Indicator_Jul20	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_RAR_NTFS_ADS	Proofpoint	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_RAR_NtdsDIT	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_RAR_Single_Doc_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_RAR_with_PDF_Script_Obfuscation	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_RDP_File_Indicators_Oct24_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_RTF_Header_Anomaly	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Recon_Outputs_Jun20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Renamed_Bitdefender_Submission_Wizard_Feb26	X__Junior	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Renamed_Dot1Xtray	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Reversed_Base64_Encoded_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Reversed_Hacktool_Author	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_SFX_RunProgram_WScript	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_SFX_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_SVG_JS_Payload_Mar25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ScheduledTasks_Nimbus_Manticore_Persistence_May26	Jonathan Peters (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Scheduled_Task_BigSize	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Scheduled_Task_Java_JAR_Aug25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ScreenConnect_Exploitation_Artefacts_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ScreenConnect_New_User_2024_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ScreenConnect_User_2024_No_Logon_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ScreenConnect_User_Gmail_2024_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ScreenConnect_User_PoC_Com_Unused_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ScreenConnect_User_PoC_Com_Used_Feb24	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Script_Base64_Blocks_Jun20_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Script_Obfuscation_Char_Concat	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ServU_Known_Mal_IP_Jul21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ServU_SSH_Error_Pattern_Jul21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Size_of_ASUS_TuningTool	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Solarwinds_SUNBURST_Revoked_Cert	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Sysinternals_Desktops_Anomaly_Feb25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_THOR_Unsigned_Oct23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_TH_APT_UNC4736_TradingTech_Cert_Apr23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_TINY_PE	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ThemeBleed_Theme_Sep23	@m_haggis, @nas_bench	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Two_Byte_XOR_PE_And_MZ	Wesley Shields <wxs@atarininja.org>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Unsigned_GoogleUpdate	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Unsigned_OSPPSVC	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_VBA_FileSystem_Access	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_VCRuntime_Sideloading_Indicators_Aug23	Jonathan Peters	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_VEST_Encryption_Core_Accumulator_Jan21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_VHD_Suspicious_Small_Size	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_VULN_DRV_PROCEXP152_May23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_VULN_DRV_PROCEXP152_Renamed_May23	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_VulnDriver_HP_Hardware_Diagnostics_Etdsupp_May23	X__Junior (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_WEBSHELL_Cmd_Indicator_Apr25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_WEBSHELL_LOG_Signatures_Dec25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_WER_Critical_HeapCorruption	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_WER_Suspicious_Crash_Directory	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_Win32dll_String	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_WordDoc_VBA_Macro_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_XMRIG_Reference	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_XMRIG_String	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_XORed_MSDOS_Stub_Message	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_XORed_Mozilla_Oct19	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_XORed_URL_In_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ZIP_ISO_PhishAttachment_Pattern_Jun22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ZIP_LNK_PhishAttachment_Pattern_Jun22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_ZIP_NtdsDIT	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_autocad_lsp_malware	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_certificate_payload	Didier Stevens, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_obfuscated_JS_obfuscatorio	@imp0rtp3	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SUSP_shellpop_Bash	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SVG_LoadURL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
S_MultiFunction_Scanners_s	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Safe_Mode_Bypass_PHP_4_4_2_and_PHP_5_1_2_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sality_Malware_Oct16	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Saudi_Phish_Trojan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ScanBox_Malware_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Scarcruft_malware_Feb18_1	Florian rootpath	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SeDLL_Javascript_Decryptor	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SeaDuke_Sample	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SecurityXploded_Producer_String	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Servantshell	Arbor Networks ASERT Nov 2015	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SetupBDoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ShadowPad_nssock2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Shamoon2_ComComp	Florian Roth (Nextron Systems) (with Binar.ly)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Shamoon2_Wiper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SharpCat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sharpire	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ShellCrew_StreamEx_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ShellCrew_StreamEx_1_msi	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ShellCrew_StreamEx_1_msi_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Shell_Asp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Shellcode_APIHashing_FIN8	Frank Boldewin (@r3c0nst)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Shifu_Banking_Trojan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sig_RemoteAdmin_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Silence_malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Silence_malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SimAttacker___Vrsion_1_0_0___priv8_4_My_friend_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SimShell_1_0___Simorgh_Security_MGZ_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Simple_PHP_BackDooR	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sincap_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sleep_Timer_Choice	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Slingshot_APT_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Slingshot_APT_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Slingshot_APT_Malware_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Slingshot_APT_Malware_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Slingshot_APT_Minisling	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Slingshot_APT_Ring0_Loader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Slingshot_APT_Spork_Downloader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sliver_Implant_32bit	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sliver_Implant_64bit	gssincla@google.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Smartniff	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SnakeTurla_Install_SH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SnakeTurla_Installd_SH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SnakeTurla_Malware_May17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SnakeTurla_Malware_May17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SnakeTurla_Malware_May17_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SndVol_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sniffer_analyzer_SSClone_1210_full_version	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SoakSoak_Infected_Wordpress	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SocGholish_JS_22_02_2022	Wojciech Cieślak	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sofacy_AZZY_Backdoor_HelperDLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_AZZY_Backdoor_Implant_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Bundestag_Batch	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Campaign_Mal_Feb18_cdnver	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_CollectorStealer_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_CollectorStealer_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_CollectorStealer_Gen3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Fybis_ELF_Backdoor_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Fysbis_ELF_Backdoor_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Jun16_Sample1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Jun16_Sample2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Jun16_Sample3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Mal2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Mal3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Malware_AZZY_Backdoor_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Malware_StrangeSpaces	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Oct17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Oct17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sofacy_Trojan_Loader_Feb18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sphinx_Moth_cudacrt	Kudelski Security - Nagravision SA	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sphinx_Moth_h2t	Kudelski Security - Nagravision SA (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sphinx_Moth_iastor32	Kudelski Security - Nagravision SA	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sphinx_Moth_kerberos32	Kudelski Security - Nagravision SA (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sphinx_Moth_kerberos64	Kudelski Security - Nagravision SA (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Sphinx_Moth_nvcplex	Kudelski Security - Nagravision SA	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
SplitJoin_V1_3_3_rar_Folder_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SqlDbx_zhs	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StealthWasp_s_Basic_PortScanner_v1_2	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
StegoKatz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StoneDrill	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StoneDrill_BAT_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StoneDrill_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StoneDrill_Service_Install	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StoneDrill_VBS_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StoneDrill_main_sub	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
StoneDrill_ntssrvr32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StreamEx_ShellCrew	Cylance	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
StuxNet_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
StuxNet_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Stuxnet_Malware_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Stuxnet_Malware_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Stuxnet_Malware_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Stuxnet_Shortcut_to	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Stuxnet_maindll_decrypted_unpacked	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Stuxnet_s7hkimdb	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suckfly_Nidiran_Gen_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suckfly_Nidiran_Gen_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suckfly_Nidiran_Gen_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SunOrcal_Malware_Nov17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SuperScan4	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Susp_Indicators_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Susp_PowerShell_Sep17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Susp_PowerShell_Sep17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_AutoIt_by_Microsoft	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_BAT_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_JS_script_content	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_PowerShell_Code_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_PowerShell_WebDownload_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Script_Running_from_HTTP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_chrome_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Suspicious_Size_csrss_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_firefox_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_iexplore_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_igfxhk_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_java_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_lsass_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_rundll32_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_servicehost_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_smss_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_spoolsv_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_svchost_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_taskhost_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_wininit_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Suspicious_Size_winlogon_exe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SwitchSniffer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Sword1_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SysInterals_PipeList_NameChanged	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
SysInternals_Tool_Anomaly	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TA17_293A_Hacktool_Exploit_MS16_032	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TA17_293A_Hacktool_PS_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TA17_293A_Hacktool_Touch_MAC_modification	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TA17_293A_Query_Javascript_Decode_Function	other (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TA17_293A_Query_XML_Code_MAL_DOC	other (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TA17_293A_Query_XML_Code_MAL_DOC_PT_2	other (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TA17_293A_energetic_bear_api_hashing_tool	CERT RE Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TA17_293A_malware_1	US-CERT Code Analysis Team (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TA17_318A_rc4_stack_key_fallchill	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TA17_318A_success_fail_codes_fallchill	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TA17_318B_volgmer	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TA18_074A_screen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TA18_074A_scripts	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TA459_Malware_May17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TA459_Malware_May17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TEST_false_positive_plain_fnv1a_in_x64	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TRITON_ICS_FRAMEWORK	nicholas.carr @itsreallynick	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TSCookie_RAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TeleBots_CredRaptor_Password_Stealer	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TeleBots_IntercepterNG	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TeleBots_KillDisk_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TeleBots_KillDisk_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TeleBots_VBS_Backdoor_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TeleBots_VBS_Backdoor_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TeleBots_Win64_Spy_KeyLogger_G	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TeleDoor_Backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TempRacer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Test_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ThreatGroup3390_C2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ThreatGroup3390_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TidePool_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Tiny_Network_Tool_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Tofu_Backdoor	Cylance	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Tool_MSIL_CSharpUtils_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Tool_MSIL_SharpGrep_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Tool_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Tools_2014	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Tools_2015	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Tools_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Tools_scan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Tools_unknown	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Tools_xport	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TopHat_BAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TopHat_Malware_Jan18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TopHat_Malware_Jan18_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Triton_trilog	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TrojanDownloader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Trojan_ISMRAT_gen	Ahmed Zaki	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_MSIL_GORAT_Module_PowerShell_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_MSIL_GORAT_Plugin_DOTNET_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Macro_RESUMEPLEASE_1	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Raw_Generic_4	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Adupib	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Dipsind_B	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_PlaKeylog_B	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_PlaLsaLog	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_PlaSrv	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plabit	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Placisc2	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Placisc3	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Placisc4	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plagicom	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plagon	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plainst	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plainst2	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plakelog	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plaklog	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plakpeer	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plakpers	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plapiio	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Plaplex	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win32_Platual	Microsoft	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win64_Generic_22	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win64_Generic_23	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Trojan_Win_Generic_101	FireEye	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
TurlaMosquito_Mal_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TurlaMosquito_Mal_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TurlaMosquito_Mal_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TurlaMosquito_Mal_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TurlaMosquito_Mal_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
TurlaMosquito_Mal_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Turla_APT_Malware_Gen1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Turla_APT_Malware_Gen3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Turla_APT_srsvc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Turla_KazuarRAT	Markus Neis / Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Turla_Mal_Script_Jan18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_Sql	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_asp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_asp1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_aspx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_aspx1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_aspxlcx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_aspxtag	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_ftp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_hello	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_jsp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_jspcmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_lcx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_php_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Txt_xiao	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Typical_Malware_String_Transforms	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Tzddos_DDoS_Tool_CN	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
UACElevator	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
UACME_Akagi	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
UACME_Akagi_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
UBoatRAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
UBoatRAT_Dropper	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
URL_File_Local_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
UnPack_rar_Folder_InjectT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
UnPack_rar_Folder_TBack	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unauthorized_Proxy_Server_RAT	US-CERT Code Analysis Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Unidentified_Malware_Two	US CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Unit78020_Malware_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unit78020_Malware_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unit78020_Malware_Gen3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Universal_Exploit_Strings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unknown_0f06c5d1b32f4994c3b3abf8bb76d5468f105167	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unknown_8af033424f9590a15472a23cc3236e68070b952e	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unknown_Malware_Sample_Jul17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unpack_Injectt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unpack_TBack	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unspecified_Malware_Jul17_1A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unspecified_Malware_Jul17_2C	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unspecified_Malware_Oct16_A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unspecified_Malware_Oct16_C	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unspecified_Malware_Oct16_D	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unspecified_Malware_Oct16_E	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Unspecified_Malware_Sep1_A1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Upatre_Hazgurut	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
UploadShell_98038f1efa4203432349badabad76d44337319a6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
User_Function_String	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Utilman_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VBS_Obfuscated_Mal_Feb18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VBS_WMIExec_Tool_Apr17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VBS_dropper_script_Dec17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VBScript_Favicon_File	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VSSown_VBS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VUBrute_VUBrute	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VUBrute_config	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VULN_Confluence_Questions_Plugin_CVE_2022_26138_Jul22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_Dell_BIOS_Update_Driver_DBUtil_May21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_Erlang_OTP_SSH_CVE_2025_32433_Apr25	Pierre-Henri Pezier, Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_KeePass_DB_Brute_Forcible	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_LNX_OMI_RCE_CVE_2021_386471_Sep21	Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_Linux_NFS_Exports	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VULN_Linux_Sudoers_Commands	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VULN_PHP_Hack_Backdoored_Phpass_May21	Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_PHP_Hack_Backdoored_Zlib_Zerodium_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_PUA_GIGABYTE_Driver_Jul22_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_PrinterDriver_PrivEsc_CVE_2021_3438_Jul21	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_Python_Hack_Backdoored_Ctx_May21	Christian Burkard	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VULN_Slapd_Conf_with_Default_Password	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VULN_Unencrypted_SSH_Private_Key	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VULN_Unencrypted_SSH_Private_Key_Root_Folder	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VUL_Exchange_CVE_2020_0688	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VUL_JQuery_FileUpload_CVE_2018_9206	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
VUL_Tomcat_Catalina_CVE_2020_1938	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Venom_Rootkit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Vermin_Keylogger_Jan18_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
VisualDiscovery_Lonovo_Superfish_SSL_Hijack	Florian Roth (Nextron Systems) / improved by kbandla	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Volgmer_Malware	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WAF_Bypass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WCE_Modified_1_1014	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WCE_in_memory	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_APT_PHP_DEWMODE_UNC2546_Feb21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_Chopper_Like_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_Compiled_Sharepoint_Drop_CVE_2025_53770_Jul25_2	Florian Roth, Marius Benthin	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_DLL_MOVEit_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_FileExplorer_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_MOVEit_Jun23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_ProxyShell_Aug15	Moritz Oettle	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_ProxyShell_Aug21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_ProxyShell_Aug21_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_ProxyShell_Aug21_3	Max Altgelt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_ProxyShell_Exploitation_Aug21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_ProxyShell_Sep21_1	Tobias Michalski	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_Regeorg_CSHARP	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_Sharepoint_Drop_CVE_2025_53770_Jul25	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_SimpleSeeSharp	threatintel@volexity.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_SportsBall	threatintel@volexity.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_XslTransform_Aug21	Max Altgelt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASPX_reGeorgTunnel	threatintel@volexity.com	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_By_String	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Embedded_Mar21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Encoded	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Encoded_AspCoding	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Generic	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Generic_Eval_On_Input	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Generic_Registry_Reader	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Generic_Tiny	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Nano	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_OBFUSC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Runtime_Compile	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_SQL	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Scan_Writable	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Sniffer	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ASP_Writer	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_CSHARP_Generic	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_CVE_2021_27065_Webshells	Joe Hannon, Microsoft Threat Intelligence Center (MSTIC)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_Compiled_Webshell_Mar2021_1	Bundesamt fuer Sicherheit in der Informationstechnik	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_Cookie_Post_Obfuscation	Arnim Rupp (https://github.com/ruppde)	https://github.com/SigmaHQ/Detection-Rule-License/blob/main/LICENSE.Detection.Rules.md	https://github.com/Neo23x0/signature-base
WEBSHELL_Csharp_Hash_String_Oct22	Nils Kuhnert (modified by Florian Roth)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_G_APT_BackdoorWebshell_SLAYSTYLE_1	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_G_APT_BackdoorWebshell_SLAYSTYLE_2	Google Threat Intelligence Group (GTIG) (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_Generic_OS_Strings	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_H4ntu_Shell_Powered_Tsoi	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_H4ntu_Shell_Powered_Tsoi_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_H4ntu_Shell_Powered_Tsoi_3	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_HAFNIUM_CISA_10328929_01	CISA Code & Media Analysis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_HAFNIUM_CISA_10328929_02	CISA Code & Media Analysis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_In_Image	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JAVA_VersaMem_JAR_Aug24_1	blacklotuslabs (modified by Florian Roth and X__Junior)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_JAVA_VersaMem_JAR_Aug24_2	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_By_String	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Generic	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Generic_Base64	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Generic_Classloader	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Generic_Encoded_Shell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Generic_ProcessBuilder	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Generic_Reflection	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_HTTP_Proxy	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Input_Upload_Write	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_NetSpy	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Nov21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_ReGeorg	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_JSP_Writer_Nano	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_Mailbox_Export_PST_ProxyShell_Aug26	Moritz Oettle	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_Mixed_OBFUSC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PAS_webshell	FR/ANSSI/SDO (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_PAS_webshell_PerlNetworkScript	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_PAS_webshell_SQLDumpFile	FR/ANSSI/SDO	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_PAS_webshell_ZIPArchiveFile	FR/ANSSI/SDO (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Base64_Encoded_Payloads	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_By_String_Known_Webshell	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Double_Eval_Tiny	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Dynamic	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Dynamic_Big	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Encoded_Big	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Function_Via_Get	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Generic_Backticks	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Generic_Backticks_OBFUSC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Generic_Callback	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Generic_Eval	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Gzinflated	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_In_Htaccess	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Includer_Eval	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Includer_Tiny	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_OBFUSC	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_OBFUSC_3	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_OBFUSC_Encoded	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_OBFUSC_Encoded_Mixed_Dec_And_Hex	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_OBFUSC_Fopo	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_OBFUSC_Str_Replace	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_OBFUSC_Tiny	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Strings_SUSP	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Unknown_1	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_PHP_Writer	Arnim Rupp (https://github.com/ruppde)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WEBSHELL_ProxyShell_Exploitation_Nov21_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_SECRETSAUCE_Jul23_1	Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_Z_WebShell_1	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEBSHELL_Z_Webshell_2	DHS NCCIC Hunt and Incident Response Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WEB_INF_web	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WINDOWS_UPDATE_BDC	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WINNTI_KingSoft_Moz_Confustion	Markus Neis	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WMI_vbs	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WMImplant	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WPR_Asterisk_Hook_Library	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WPR_Passscape_Loader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WPR_WindowsPasswordRecovery_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WPR_WindowsPasswordRecovery_EXE_64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WPR_loader_DLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WPR_loader_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WSOShell_0bbebaf46f87718caba581163d4beed56ddf73a7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WScriptShell_Case_Anomaly	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WScript_Shell_PowerShell_Combo	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WSockExpert	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WannCry_BAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WannCry_m_vbs	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WannaCry_RansomNote	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WannaCry_Ransomware	Florian Roth (Nextron Systems) (with the help of binar.ly)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WannaCry_Ransomware_Gen	Florian Roth (Nextron Systems) (based on rule by US CERT)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WaterBug_fa_malware	Symantec Security Response	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WaterBug_sav	Symantec Security Response	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WaterBug_sav_dropper	Symantec Security Response	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WaterBug_turla_dll	Symantec Security Response	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WaterBug_turla_dropper	Symantec Security Response	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WaterBug_wipbot_2013_core	Symantec Security Response	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WaterBug_wipbot_2013_core_PDF	Symantec Security Response	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WaterBug_wipbot_2013_dll	Symantec Security Response	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Waterbear_10_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_11_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_12_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_13_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_14_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_1_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_2_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_4_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_5_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Waterbear_6_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_7_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Waterbear_8_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Waterbear_9_Jun17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebCrack4_RouterPasswordCracking	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_5786d7d9f4b0df731d79ed927fb5a124195fc901	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_AK_74_Security_Team_Web_Shell_Beta_Version	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Ayyildiz_Tim___AYT__Shell_v_2_1_Biz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_C99madShell_v__2_0_madnet_edition	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_CasuS_1_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_CmdAsp_asp_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_DTool_Pro	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_GFS	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Gamma_Web_Shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_1609_A	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_11	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Generic_PHP_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WebShell_IronShell_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_JexBoss_JSP_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WebShell_JexBoss_WAR_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WebShell_JspWebshell_1_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_JspWebshell_1_2_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Liz0ziM_Private_Safe_Mode_Command_Execuriton_Bypass_Exploit_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Moroccan_Spamers_Ma_EditioN_By_GhOsT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_NCC_Shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_NTDaddy_v1_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_PHANTASMA	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_PHP_Backdoor_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_PHP_Web_Kit_v3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_PHP_Web_Kit_v4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_PhpSpy_Ver_2006	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_RemExp_asp_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_STNC_WebShell_v0_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Safe_Mode_Bypass_PHP_4_4_2_and_PHP_5_1_2_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Safe_Mode_Bypass_PHP_4_4_2_and_PHP_5_1_2_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_SimAttacker___Vrsion_1_0_0___priv8_4_My_friend	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Simple_PHP_backdoor_by_DK	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Sincap_1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Uploader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Web_shell__c_ShAnKaR	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_WinX_Shell_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_Worse_Linux_Shell_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_ZyklonShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell__Ajax_PHP_Command_Shell_Ajax_PHP_Command_Shell_soldierofallah	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell__CrystalShell_v_1_erne_stres	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell__CrystalShell_v_1_sosyete_stres	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell__Cyber_Shell_cybershell_Cyber_Shell__v_1_0_	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell__PH_Vayv_PHVayv_PH_Vayv	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell__PH_Vayv_PHVayv_PH_Vayv_klasvayv_asp_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell__Small_Web_Shell_by_ZaCo_small_zaco_zacosmall	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell__findsock_php_findsock_shell_php_reverse_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_aZRaiLPhp_v1_0_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_accept_language	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_b374k_mini_shell_php_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_b374k_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_backupsql	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_c99_locus7s	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_c99_madnet	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_cgi	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WebShell_cgitelnet	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_dC3_Security_Crew_Shell_PRiV	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_dC3_Security_Crew_Shell_PRiV_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_ftpsearch	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_g00nshell_v1_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_go_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_hiddens_shell_v1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_indexer_asp_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_lamashell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_mysql_tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_include_w_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_529	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_MyShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_NGH	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_README	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_aspydrv	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_cpanel	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_cw	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_kral	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_lolipop	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_lostDC	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_matamu	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_myshell_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_pHpINJ	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_pws	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_spygrup	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_php_webshells_tryag	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_qsd_php_backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_reader_asp_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_ru24_post_sh	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_safe0ver	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_simattacker	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_simple_backdoor_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_simple_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_toolaspshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_webshells_zehir4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WebShell_zehir4_asp_php	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_27_9_acid_c99_locus7s	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_27_9_c66_c99	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_AcidPoison	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_Ayyildiz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_Backdoor_PHP_Agent_r57_mod_bizzz_shell_r57	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_Caterpillar_ASPX	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_FOPO_Obfuscation_APT_ON_Nov17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_Insomnia	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_Tiny_JSP_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_acid_AntiSecShell_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_acid_FaTaLisTiCz_Fx_fx_p0isoN_sh3ll_x0rg_byp4ss_256	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_and_Exploit_CN_APT_HK	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_c100	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_c99_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_r57shell_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Webshell_zehir	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Weevely_Webshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_10	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_7	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WildNeutron_Sample_9	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WiltedTulip_Matryoshka_RAT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_Netsrv_netsrvs	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_ReflectiveLoader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_SilverlightMSI	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_Tools_back	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_Tools_clrlg	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_WindowsTask	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_Windows_UM_Task	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_Zpp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_matryoshka_Injector	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_powershell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_tdtess	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WiltedTulip_vminst	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Win32_Buzus_Softpulse	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Win32_klock	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Win7Elevatev2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WinAgent_BadPatch_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WinAgent_BadPatch_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WinDivert_Driver	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WinEggDropShellFinal_zip_Folder_InjectT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WinPayloads_Payload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WinPayloads_PowerShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WinX_Shell_html	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Win_PrivEsc_ADACLScan4_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Win_PrivEsc_folderperm	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Win_PrivEsc_gp3finder_v4_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WindosShell_s1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WindowsCredentialEditor	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
WindowsShell_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WindowsShell_Gen2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WindowsShell_s3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WindowsShell_s4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Winexe_RemoteExec	Florian Roth (Nextron Systems), Robert Simmons	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Winnti_NlaifSvc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Winnti_fonfig	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Winnti_malware_FWPK	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Winnti_malware_Nsiproxy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Winnti_malware_StreamPortal_Gen	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Winnti_malware_UpdateDLL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Winnti_signing_cert	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WoolenGoldfish_Generic_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WoolenGoldfish_Generic_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WoolenGoldfish_Generic_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WoolenGoldfish_Sample_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
WordDoc_PowerShell_URLDownloadToFile	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Wordpress_Config_Webshell_Preprend	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Worse_Linux_Shell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
XMRIG_Monero_Miner	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
XMRIG_Monero_Miner_Config	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
XOR_4byte_Key	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
XScanLib	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
XYZCmd_zip_Folder_Readme	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
XYZCmd_zip_Folder_XYZCmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Xtreme_RAT_Gen_Imp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Xtreme_Sep17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Xtreme_Sep17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Xtreme_Sep17_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ysoserial_Payload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ysoserial_Payload_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ysoserial_Payload_C3P0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ysoserial_Payload_MozillaRhino1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Ysoserial_Payload_Spring1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ZXshell2_0_rar_Folder_ZXshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ZXshell2_0_rar_Folder_nc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ZXshell2_0_rar_Folder_zxrecv	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ZXshell_20171211_chrsben	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
Zehir_4_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
Zeus_Panda	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ZxShell_Jul17	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ZxShell_Related_Malware_CN_Group_Jul17_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ZxShell_Related_Malware_CN_Group_Jul17_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ZxShell_Related_Malware_CN_Group_Jul17_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
_1_c2007_php_php_c100_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_Bitchin_Threads_	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_Crystal_php_nshell_php_php_load_shell_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_FsHttp_FsPop_FsSniffer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
_GFS_web_shell_ver_3_1_7___PRiV8_php_nshell_php_php_gfs_sh_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_Project1_Generate_rejoice	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
_antichat_php_php_Fatalshell_php_php_a_gedit_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_c99shell_v1_0_php_php_c99php_1_c2007_php_php_c100_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_c99shell_v1_0_php_php_c99php_SsEs_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_c99shell_v1_0_php_php_c99php_SsEs_php_php_ctt_sh_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_hscan_hscan_hscangui	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
_iissample_nesscan_twwwscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
_network_php_php_xinfo_php_php_nfm_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_nixrem_php_php_c99shell_v1_0_php_php_c99php_NIX_REMOTE_WEB_SHELL_v_0_5_alpha_Lite_Public_Version_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_nst_php_php_cybershell_php_php_img_php_php_nstview_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_nst_php_php_img_php_php_nstview_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_r577_php_php_SnIpEr_SA_Shell_php_r57_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_r577_php_php_SnIpEr_SA_Shell_php_r57_php_php_r57_Shell_php_php_spy_php_php_s_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_r577_php_php_SnIpEr_SA_Shell_php_r57_php_php_spy_php_php_s_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_r577_php_php_r57_Shell_php_php_spy_php_php_s_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_r577_php_php_r57_php_php_r57_Shell_php_php_spy_php_php_s_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_r577_php_php_r57_php_php_spy_php_php_s_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_r577_php_php_spy_php_php_s_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_root_040_zip_Folder_deploy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
_w_php_php_c99madshell_v2_1_php_php_wacking_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_c99madshell_v2_1_php_php_wacking_php_php_1_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_c99madshell_v2_1_php_php_wacking_php_php_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_c99madshell_v2_1_php_php_wacking_php_php_SsEs_php_php_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_c99madshell_v2_1_php_php_wacking_php_php_c99shell_v1_0_php_php_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_c99madshell_v2_1_php_php_wacking_php_php_c99shell_v1_0_php_php_c99php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_c99madshell_v2_1_php_php_wacking_php_php_c99shell_v1_0_php_php_c99php_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_c99madshell_v2_1_php_php_wacking_php_php_dC3_Security_Crew_Shell_PRiV_php_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_wacking_php_php_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_wacking_php_php_SsEs_php_php_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_w_php_php_wacking_php_php_c99shell_v1_0_php_php_c99php_SpecialShell_99_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
_wacking_php_php_1_SpecialShell_99_php_php_c100_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
aZRaiLPhp_v1_0_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
adjustcr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
admin_ad	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ak74shell_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
aolipsniffer	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt28_win_zebrocy_golang_loader_modified	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt3_bemstour_implant_byte_patch	Mark Lechtik	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt3_bemstour_implant_command_stack_variable	Mark Lechtik	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt3_bemstour_strings	Mark Lechtik	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_CN_Tetris_JS_advanced_1	@imp0rtp3 (modified by Florian Roth)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_CN_Tetrisplugins_JS	@imp0rtp3	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_ProjectSauron_MyTrampoline	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_ProjectSauron_encrypted_LSA	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_ProjectSauron_encrypted_SSPI	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_ProjectSauron_encrypted_container	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_ProjectSauron_encryption	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_ProjectSauron_generic_pipe_backdoor	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_ProjectSauron_pipe_backdoor	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_IRIX_exploit_GEN	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_cle_tool	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_customlokitools	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_customsniffer	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_de_tool	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_encrypted_keylog	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_u_logcleaner	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_wipe	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_MoonlightMaze_xk_keylogger	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_RU_Turla_Kazuar_DebugView_peFeatures	JAG-S	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_backspace	Bit Byte Bitten	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_equation_cryptotable	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_equation_doublefantasy_genericresource	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_equation_equationlaser_runtimeclasses	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_equation_exploitlib_mutexes	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_equation_keyword	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_hellsing_implantstrings	Costin Raiu, Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_hellsing_installer	Costin Raiu, Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_hellsing_irene	Costin Raiu, Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_hellsing_msgertype2	Costin Raiu, Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_hellsing_proxytool	Costin Raiu, Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_hellsing_xkat	Costin Raiu, Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_nix_elf_Derusbi_Linux_SharedMemCreation	Fidelis Cybersecurity	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_nix_elf_Derusbi_Linux_Strings	Fidelis Cybersecurity	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_nix_elf_derusbi	Fidelis Cybersecurity	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_nix_elf_derusbi_kernelModule	Fidelis Cybersecurity	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_regin_hopscotch	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_regin_legspin	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_sofacy_xtunnel	Claudio Guarnieri	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_win32_dll_rat_1a53b0cp32e46g0qio7	Fidelis Cybersecurity	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_win32_dll_rat_hiZorRAT	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
apt_win_exe_trojan_derusbi	Fidelis Cybersecurity	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
arpsniffer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
asp_dns	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
asp_file	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
asp_proxy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
asp_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspbackdoor_EDIR	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspbackdoor_EDIT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspbackdoor_asp1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspbackdoor_asp3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspbackdoor_asp4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspbackdoor_entice	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspbackdoor_ipclear	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspbackdoor_regdll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspfile1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspfile2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspx_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
aspydrv_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
b374k_back_connect	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
backdoor1_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
backdoorfr_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
backup_php_often_with_c99shell	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
backupsql_php_often_with_c99shell	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
bdcli100	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
bin_Client	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
bin_ndisk	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
bin_wuaus	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
binder2_binder2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
blackenergy3_installer	Mike Schladt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
brc4_core	@ninjaparanoid	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
brc4_shellcode	@ninjaparanoid	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
by063cli	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
by064cli	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
byloader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
byshell063_ntboot	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
byshell063_ntboot_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
c99madshell_v2_0_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
c99shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
cachedump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ce_enfal_cmstar_debug_msg	rfalcone	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
cfm_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
cgi_python_py	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
cgis4_cgis4	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
chrome_elf	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
churrasco	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
clean_apt15_patchedcmd	Ahmed Zaki	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
clearlog	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
cmdShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
cmd_asp_5_1_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
cmdjsp_jsp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
cndcom_cndcom	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
commands	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
conhost_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
connectback2_pl	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
connector	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
crack_Loader	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_h2miner_kinsing	Tony Lambert, Red Canary	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_ole_loadswf_cve_2018_4878	Vitali Kremez, Flashpoint	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_win32_dridex_socks5_mod	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_win32_hvnc_banker_gen	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_win32_parallax_loader_1	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_win32_parallax_payload_1	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_win32_ransom_maze_dll_1	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_win64_backdoor_bazarbackdoor1	@VK_Intel	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
crime_win_rat_AlienSpy	General Dynamics Fidelis Cybersecurity Solutions - Threat Research Team	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
csh_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
csrss_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
custom_ssh_backdoor_server	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
cyberlords_sql_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
cyclotron	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
datPcShare	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dat_NaslLib	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dat_report	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dbexpora	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dbgiis6cli	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dbgntboot	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
derusbi_kernel	Airbus Defence and Space Cybersecurity CSIRT - Fabien Perigaud	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
derusbi_linux	Airbus Defence and Space Cybersecurity CSIRT - Fabien Perigaud	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
dll_PacketX	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dll_Reg	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dll_UnReg	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dnscat2_Hacktool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
doskey_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
down_rar_Folder_down	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
dubseven_dropper_dialog_remains	Matt Brooks, @cmatthewbrooks	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
dubseven_dropper_registry_checks	Matt Brooks, @cmatthewbrooks	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
dubseven_file_set	Matt Brooks, @cmatthewbrooks	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
eBayId_index3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
elmaliseker	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
elmaliseker_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
epathobj_exp32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
epathobj_exp64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
exploit_ole_stdolelink	David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
explorer_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
f3_diy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
fgexec	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
fmlibraryv3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
fuckphpshell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
gen_exploit_CVE_2017_10271_WebLogic	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
gen_macro_ShellExecute_action	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
gen_python_encoded_adware	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
gen_python_pyminifier_encoded_payload	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
gen_python_reverse_shell	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
gen_suspicious_InPage_dropper	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
gen_unicorn_obfuscated_powershell	John Lambert @JohnLaTwC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
generic_shellcode_downloader_specific	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
genhash_genhash	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
gina_zip_Folder_gina	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
git_CVE_2017_9800_poc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
glassRAT	RSA RESEARCH	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
h4ntu_shell__powered_by_tsoi_	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_exploit_cve_5889	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_exploit_tpwn	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_juuso_keychaindump	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_keylogger_b4rsby_swiftlog	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_keylogger_caseyscarborough	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_keylogger_dannvix	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_keylogger_eldeveloper_keystats	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_keylogger_giacomolaw	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_keylogger_logkext	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_keylogger_roxlu_ofxkeylogger	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_keylogger_skreweverything_swift	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_macpmem	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_manwhoami_icloudcontacts	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_manwhoami_mmetokendecrypt	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_manwhoami_osxchromedecrypt	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_n0fate_chainbreaker	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_macos_ptoomey3_keychain_dumper	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_multi_bloodhound_owned	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_multi_jtesta_ssh_mitm	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_multi_masscan	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_multi_ncc_ABPTTS	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_multi_ntlmrelayx	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_multi_pyrasite_py	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_multi_responder_py	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_hot_potato	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_mimikatz_copywrite	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_mimikatz_errors	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_mimikatz_files	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_mimikatz_modules	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_mimikatz_sekurlsa	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_moyix_creddump	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_ncc_wmicmd	@mimeframe	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_rdp_cmd_delivery	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hacktool_windows_wmi_implant	@fusionrace	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_compiled_python	DHS/NCCIC/ICS-CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_dividers	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_filesize	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_injector	DHS/NCCIC/ICS-CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_loadoff	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_memcpy	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_mftmsr	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_nullsub	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_origaddr	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_origcode	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_payload	DHS/NCCIC/ICS-CERT	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hatman_setstatus	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hkdoor_backdoor	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hkdoor_backdoor_dll	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hkdoor_driver	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hkdoor_dropper	Cylance Inc.	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
hkdoordll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hkmjjiis6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hkshell_hkrmv	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hkshell_hkshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hscan_gui	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hscangui	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hxdef100	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hxdef100_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hydra_7_3_hydra	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
hydra_7_4_1_hydra	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iKAT_Tool_Generic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iKAT_cmd_as_dll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iKAT_command_lines_agent	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iKAT_priv_esc_tasksch	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iKAT_revelations	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iKAT_startbar	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iKAT_tools_nmap	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iKAT_wmi_rundll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iMHaPFtp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iam_alt_iam_alt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iam_iam	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iam_iamdll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
icyfox007v1_10_rar_Folder_asp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
iexplore_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
indexer_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
install_get_persistent_filenames	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
installer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ipsearcher	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ironshell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
item_301	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
item_old	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
jsp_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
jsp_reverse_jsp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
jspshall_jsp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
kacak_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
kappfree	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
kappfree_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
karmaSMB	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
kelloworld_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
kerberoast_PY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
kiwi_tools	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
kiwi_tools_gentil_kiwi	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
klasvayv_asp	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
lamashell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
lamescan3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
laudanum	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
lnk_detect	NCSC	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
loki2crypto	Costin Raiu, Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
lsadump	Benjamin DELPY (gentilkiwi)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
lsass_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
lsremora	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
lurm_safemod_on_cgi	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
magnify_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
maindll_mutex	Matt Brooks, @cmatthewbrooks	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mal_babbleloader_win_jan24	0x0d4y	CC BY 4.0	https://github.com/Neo23x0/signature-base
mal_lockbit4_hashing_alg_win_feb24	0x0d4y	CC BY 4.0	https://github.com/Neo23x0/signature-base
mal_lockbit4_packed_feb24	0x0d4y	CC BY 4.0	https://github.com/Neo23x0/signature-base
mal_lockbit4_rc4_win_feb24	0x0d4y	CC BY 4.0	https://github.com/Neo23x0/signature-base
malrtf_ole2link	@h3x2b <tracker _AT h3x.eu>	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_apt15_bs2005	Ahmed Zaki	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_apt15_exchange_tool	Ahmed Zaki	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_apt15_generic	David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_apt15_royalcli_1	David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_apt15_royalcli_2	Nikolaos Pantazopoulos	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_apt15_royaldll	David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_apt15_royaldll_2	Ahmed Zaki	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_sakula_memory	David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_sakula_shellcode	David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
malware_sakula_xorloop	David Cannings	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
merlinAgent	Hilko Bengen	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mimikatz	Benjamin DELPY (gentilkiwi)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mimikatz_kirbi_ticket	Benjamin DELPY (gentilkiwi); Didier Stevens	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mimikatz_lsass_mdmp	Benjamin DELPY (gentilkiwi)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mimipenguin_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
mimipenguin_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ms10048_x64	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ms10048_x86	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ms11080_withcmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
msi_dll_Anomaly	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
mswin_check_lm_group	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
multiple_php_webshells	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
multiple_php_webshells_2	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
myshell_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mysql_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mysql_pwd_crack	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
mysql_shell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mysql_tool_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
mysqlfast	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
narrator_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ngh_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
notepad_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
nstview_nstview	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
oracle_data	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
osk_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
p0wnedAmsiBypass	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
p0wnedBinaries	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
p0wnedExploits	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
p0wnedListenerConsole	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
p0wnedPotato	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
p0wnedPowerCat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
p0wnedShell_outputs	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
p0wnedShellx64	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
pHpINJ_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
packager_cve2017_11882	Rich Warren	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
peek_a_boo	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
perlbot_pl	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
perlcmd_zip_Folder_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
php_backdoor_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
php_dns	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
php_file	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
php_include_w_shell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
php_killnc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
php_reverse_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
php_reverse_shell_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
php_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
phpbackdoor15_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
phpjackal_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
phpshell17_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
phpshell_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
phpspy_2005_full	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
phvayvv_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
portlessinst	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
portscan	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
power_pe_injection	Benjamin DELPY (gentilkiwi)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ps1_toolkit_Inveigh_BruteForce	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_Inveigh_BruteForce_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_Inveigh_BruteForce_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_Invoke_Mimikatz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_Invoke_Mimikatz_RelfectivePEInjection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_Invoke_RelfectivePEInjection	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_Invoke_Shellcode	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_Persistence	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_Persistence_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_PowerUp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ps1_toolkit_PowerUp_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
pstgdump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
pw_inspector	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
pw_inspector_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
pwreveal	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
pws_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
r57shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
r57shell_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
r57shell_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
r57shell_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
rdrbs084	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
rdrbs100	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
reDuhServers_reDuh	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
reDuhServers_reDuh_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
reDuhServers_reDuh_3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
redSails_EXE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
redSails_PY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
remsec_encrypted_api	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
remsec_executable_blob_32	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
remsec_executable_blob_64	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
remsec_executable_blob_parser	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
remsec_packer_A	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
remsec_packer_B	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
remview_2003_04_22	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
rknt_zip_Folder_RkNT	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
rootshell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
rst_sql_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
rtf_CVE_2018_0802	Rich Warren	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
rtf_cve2017_11882	John Davison	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
rtf_cve2017_11882_ole	John Davison	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
ru24_post_sh_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
s4u	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
s72_Shell_v1_1_Coding_html	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
samrdump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
saphpshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sbin_squid	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
scanarator	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
scanarator_iis	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
scanms_scanms	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
screencap	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sekurlsa	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sendmail	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
servpw	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
set	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
sethc_ANOMALY	F. Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
settings	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sh_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
shankar_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
shell_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
shellbot_pl	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
shells_PHP_wso	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
shelltools_g0t_root_Fport	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
shelltools_g0t_root_HideRun	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
shelltools_g0t_root_resolve	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
shelltools_g0t_root_uptime	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
shelltools_g0t_root_xwhois	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
shimrat	Yonathan Klijnsma (yonathan.klijnsma@fox-it.com)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
shimratreporter	Yonathan Klijnsma (yonathan.klijnsma@fox-it.com)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
sig_2005Gray	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_2008_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
sig_238_2323	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_FPipe	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_Glass2k	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_RunAsEx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_TELNET	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_TFTPD32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_cmd_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_concon	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_eee	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_findoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_fscan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_gina	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_hunt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_iecv	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_letmein	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_listip	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_nbtdump	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_sqlcmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_token	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_webget	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sig_238_xsniff	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
simple_backdoor_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
simple_cmd_html	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
skeleton_key_injected_code	Dell SecureWorks Counter Threat Unit	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
skeleton_key_patcher	Dell SecureWorks Counter Threat Unit	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
small_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
snifferport	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
splitjoin	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sql1433_SQL	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sql1433_Start	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sql1433_creck	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
sql_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
sqlcheck	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
stealth_Stealth	yarGen Yara Rule Generator by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
superscan3_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
susp_file_enumerator_with_encrypted_resource_101	ukendt	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
svchost_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
svchostdll	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
taskmgr_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
telnet_cgi	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
telnet_pl	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
telnetd_pl	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
templatr	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
thelast_index3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
thelast_orice2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
tools_NTCmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
tools_Sqlcmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
trigger_drop	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
trigger_modify	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
turla_png_dropper	Ben Humphrey	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
turla_png_reg_enum_payload	Ben Humphrey	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
u_uay	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
unknown2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
update_PcInit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
uploader_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
users_list	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
ustrrefadd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
vanquish	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
vanquish_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
w3d_php_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
warfiles_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
wce	Benjamin DELPY (gentilkiwi)	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
webadmin	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_000_403_807_a_c5_config_css_dm_he1p_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_000_403_807_a_c5_config_css_dm_he1p_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_000_403_c5_config_myxx_queryDong_spyjsp2010_zend	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_000_403_c5_queryDong_spyjsp2010	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_000_403_c5_queryDong_spyjsp2010_t00ls	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_2008_2009lite_2009mssql	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_2008_2009mssql_phpspy_2005_full_phpspy_2006_arabicspy_hkrkoz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_201_3_ma_download	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_2_520_icesword_job_ma1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_2_520_icesword_job_ma1_ma4_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_2_520_job_JspWebshell_1_2_ma1_ma4_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_2_520_job_ma1_ma4_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_400_in_JFolder_jfolder01_jsp_leo_warn_webshell_nc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_404_data_in_JFolder_jfolder01_jsp_suiyue_warn	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_404_data_in_JFolder_jfolder01_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_404_data_suiyue	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_807_a_css_dm_he1p_JspSpy_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_807_dm_JspSpyJDK5_m_cofigrue	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ASP_RemExp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ASP_aspydrv	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ASP_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ASP_tool	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ASP_zehir	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ASP_zehir4	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Ani_Shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Antichat_Shell_v1_3_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_B374kPHP_B374k	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_C99madShell_v_3_0_smowu	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Crystal_Crystal	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_DarkBlade1_3_asp_indexx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Dive_Shell_1_0_Emperor_Hacking_Team_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Dx_Dx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ELMALISEKER_Backd00r	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Expdoor_com_ASP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_GetPostpHp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Inderxer	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Java_Shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_spy2009_m_ma3_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Jspspyweb	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Liz0ziM_Private_Safe_Mode_Command_Execuriton_Bypass_Exploit	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Macker_s_Private_PHPShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_MySQL_Web_Interface_Version_0_8	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Mysql_interface_v1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_NIX_REMOTE_WEB_SHELL_NIX_REMOTE_WEB_xxx1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_NIX_REMOTE_WEB_SHELL_nstview_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_NetworkFileManagerPHP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHPJackal_v1_5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHPRemoteView	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_150	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_404	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_G5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_Shell_x3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_a	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_b37	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_bug_1_	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_c37	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_co	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_g00nv13	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_r57142	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_redcod	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PHP_sql	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_PH_Vayv_PH_Vayv	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Private_i3lue	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Safe_Mode_Bypass_PHP_4_4_2_and_PHP_5_1_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Safe_mode_breaker	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Server_Variables	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Shell_ci_Biz_was_here_c100_v_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_SimAttacker_Vrsion_1_0_0_priv8_4_My_friend	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Sst_Sheller	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_WinX_Shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_Worse_Linux_Shell_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_aZRaiLPhp_v1_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_01	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_1d	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_404	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_Ajan	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_EFSO_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_Rader	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_ajn	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_cmdasp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_dabao	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_ice	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_list	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_ntdaddy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_asp_up	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_browser_201_3_400_in_JFolder_jfolder01_jsp_leo_ma_warn_webshell_nc_download	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_browser_201_3_ma_download	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_browser_201_3_ma_ma2_download	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_bypass_iisuser_p	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_c99_Shell_ci_Biz_was_here_c100_v_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_c99_c66_c99_shadows_mod_c99shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_c99_c99shell_c99_c99shell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_c99_c99shell_c99_w4cking_Shell_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_c99_generic	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
webshell_c99_locus7s_c99_w4cking_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_c99_madnet_smowu	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_caidao_shell_404	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_caidao_shell_guo	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_caidao_shell_hkmjj	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_caidao_shell_ice	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_caidao_shell_ice_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_caidao_shell_mdb	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_cihshell_fix	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_cmd_asp_5_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_cmd_win32	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_config_myxx_zend	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_cpg_143_incl_xpl	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_customize	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_dev_core	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_drag_system	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_e8eaf8da94012e866e51547cd63bb996379690bf	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_elmaliseker_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_gfs_sh_r57shell_r57shell127_SnIpEr_SA_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ghost_source_icesword_silic	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_he1p_JspSpy_nogfw_ok_style_1_JspSpy1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_iMHaPFtp_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_in_JFolder_jfolder01_jsp_leo_warn	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_ironshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_itsec_PHPJackal_itsecteam_shell_jHn	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_itsec_itsecteam_shell_jHn	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jspShell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_123	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_12302	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_IXRbE	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_action	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_asd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_cmdjsp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_cmdjsp_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_guige	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_guige02	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_hsxa	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_jshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_k81	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_k8cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_list	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_list1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_reverse_jsp_reverse_jspbd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_sys3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_tree	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_up	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_utils	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_web	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_jsp_zx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_metaslsoft	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_minupload	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_mumaasp_com	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_mysqlwebsh	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
webshell_php_2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_404	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_by_string_obfuscation	Arnim Rupp	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_cmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_dodo_zip	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_fbi	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_ghost	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_h6ss	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_list	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_moon	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_s_u	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_sh_server	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_php_up	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_phpkit_0_1a_odd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_phpkit_1_0_odd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_phpshell3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_phpshell_2_1_config	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_phpshell_2_1_pwhash	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_phpspy2010	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_phpspy_2005_full_phpspy_2005_lite_PHPSPY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_PHPSPY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_r57_1_4_0	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_r57shell127_r57_iFX_r57_kartal_r57_antichat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_r57shell127_r57_kartal_r57	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_r57shell_r57shell127_SnIpEr_SA_Shell_EgY_SpIdEr_ShElL_V2_r57_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_redirect	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_remview_fix	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_s72_Shell_v1_1_Coding	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_shell_2008_2009mssql_phpspy_2005_full_phpspy_2006_arabicspy_hkrkoz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_shell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_arabicspy_PHPSPY_hkrkoz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_shell_phpspy_2006_arabicspy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_shell_phpspy_2006_arabicspy_hkrkoz	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_sig_404super	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_simple_backdoor	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_spjspshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_tinyasp	Jeff Beley	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
webshell_webshell_123	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshell_cnseay02_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshell_cnseay_x	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_Asp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_JJJsp2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_JJjsp3	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_JSP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_PHP	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_PHP1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_aaa	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_asp1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_code	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_con2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_jspyyy	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_make2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_pHp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_php2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_php5	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_php6	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_pppp	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_radhat	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_xxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_webshells_new_xxxx	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_wsb_idc	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_wso2_5_1_wso2_5_wso2	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
webshell_zacosmall	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
wh_bindshell_py	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
whosthere	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
whosthere_alt	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
whosthere_alt_pth	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
wininit_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
winlogon_ANOMALY	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
winnti_dropper_x64_libtomcrypt_fns	CarbonBlack Threat Research	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
winnti_dropper_x86_libtomcrypt_fns	CarbonBlack Threat Research	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
winshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
x64_KiwiCmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
x64_klock	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
xDedic_SysScan_unpacked	Kaspersky Lab	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
xRAT_1	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
x_way2_5_X_way	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
x_way2_5_sqlcmd	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
xdedic_packed_syscan	Kaspersky Lab - modified by Florian Roth	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base
xscan_gui	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
xssshell	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
xssshell_db	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
xssshell_default	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
xssshell_save	Florian Roth (Nextron Systems)	Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE	https://github.com/Neo23x0/signature-base
zacosmall_php	Neo23x0 Yara BRG + customization by Stefan -dfate- Molls	Detection Rule License 1.1	https://github.com/Neo23x0/signature-base