..  
APT1_GDOCUPLOAD.yara
APT1_LIGHTBOLT.yara
APT1_MAPIGET.yara
APT1_RARSilent_EXE_PDF.yara
APT1_Revird_svc.yara
APT1_TARSIP_ECLIPSE.yara
APT1_TARSIP_MOON.yara
APT1_WARP.yara
APT1_WEBC2_ADSPACE.yara
APT1_WEBC2_AUSOV.yara
APT1_WEBC2_BOLID.yara
APT1_WEBC2_CLOVER.yara
APT1_WEBC2_CSON.yara
APT1_WEBC2_DIV.yara
APT1_WEBC2_GREENCAT.yara
APT1_WEBC2_HEAD.yara
APT1_WEBC2_KT3.yara
APT1_WEBC2_QBP.yara
APT1_WEBC2_RAVE.yara
APT1_WEBC2_TABLE.yara
APT1_WEBC2_TOCK.yara
APT1_WEBC2_UGX.yara
APT1_WEBC2_Y21K.yara
APT1_WEBC2_YAHOO.yara
APT1_aspnetreport.yara
APT1_dbg_mess.yara
APT1_known_malicious_RARSilent.yara
APT1_letusgo.yara
APT1_payloads.yara
APT_Spindest.yara
APT_Sykipot_Korea.yara
APT_Vehidis.yara
APT_digitalgloeb_mitrefund.yara
APT_freechall_yukiheya.yara
APT_ltfcom_micro1.yara
APT_malware_1.yara
APT_malware_2.yara
APT_mophecfbr.yara
APT_questions.yara
APT_questions_LSA.yara
APT_questions_capture.yara
APT_questions_ksss.yara
APT_testgmail.yara
APT_tibetonline.yara
APT_tibetonline_Payload.yara
APT_tin_nhanh.yara
APT_yingluck.yara
APT_yingluck_C2.yara
AURIGA_APT1.yara
AURIGA_driver_APT1.yara
BANGAT_APT1.yara
BISCUIT_GREENCAT_APT1.yara
BOUNCER_APT1.yara
BOUNCER_DLL_APT1.yara
Barkiofork_APT.yara
CALENDAR_APT1.yara
CCREWBACK1.yara
COMBOS_APT1.yara
DAIRY_APT1.yara
Daserf.yara
DownloaderPossibleCCrew.yara
EclipseSunCloudRAT.yara
Elise.yara
GEN_CCREW1.yara
GLOOXMAIL_APT1.yara
GOGGLES_APT1.yara
GeorBotBinary.yara
HACKSFASE1_APT1.yara
HACKSFASE2_APT1.yara
Hangover_Appinbot.yara
Hangover_Auspo.yara
Hangover_Deksila.yara
Hangover_Foler.yara
Hangover_Fuddol.yara
Hangover_Gimwlog.yara
Hangover_Gimwup.yara
Hangover_Iconfall.yara
Hangover_Linog.yara
Hangover_Slidewin.yara
Hangover_Smackdown_Downloader.yara
Hangover_Smackdown_various.yara
Hangover_Tymtin_Degrab.yara
Hangover_UpdateEx.yara
Hangover_Vacrhan_Downloader.yara
JAR-17-20114A.yara
JPEG_EXIF_Contains_eval.yara
KINS_DLL_zeus.yara
KINS_dropper.yara
KURTON_APT1.yara
Kwampirs_RAT_Dll.yara
LIGHTDART_APT1.yara
LONGRUN_APT1.yara
Lazarus_YARARule_20180125.yara
MACROMAIL_APT1.yara
MANITSME_APT1.yara
MINIASP_APT1.yara
MiniASP.yara
MoonProject.yara
NEWSREELS_APT1.yara
PT1_GETMAIL.yara
Query_Javascript_Decode_Function.yara
Query_XML_Code_MAL_DOC.yara
Query_XML_Code_MAL_DOC_PT_2.yara
SEASALT_APT1.yara
STARSYPOUND_APT1.yara
SWORD_APT1.yara
Sykipot_SecLogin.yara
Sykipot_awesome_dailynews.yara
TABMSGSQL_APT1.yara
TrojanCookies_CCREW.yara
apt_20131218b.yara
apt_64church.yara
apt_bestnews_indiamin.yara
apt_ngo_wuaclt.yara
apt_ngo_wuaclt_pdf.yara
avdetect_procs_avdetect.yara
ccrewDownloader1.yara
ccrewDownloader2.yara
ccrewDownloader3.yara
ccrewMiniasp.yara
ccrewQAZ.yara
ccrewSSLBack1.yara
ccrewSSLBack2.yara
ccrewSSLBack3.yara
contains_pe_file.yara
contains_vbe_file.yara
dbgdetect_files_dbgdetect.yara
dbgdetect_funcs_dbgdetect.yara
dbgdetect_procs_dbgdetect.yara
embedded_macho.yara
embedded_pe.yara
fbi-carbanak.yara
grizzlybear-uscert.yara
maldoc.yara
master-rules.yara
metaxcd.yara
pe_file_pyinstaller.yara
peid-userdb-rules-with-pe-module.yara
peid-userdb-rules-without-pe-module.yara
rule APT_MAPIGET.yara
thequickbrow_APT1.yara
urausy_skype_dat.yara
vmdetect.yara
z_webshell.yara

This folder was signed by:

Christopher Ashby

Who is also provably:

Using the Keybase filesystem.

# OSX
open /keybase/public/ashby

# Linux
cd /keybase/public/ashby

Install Keybase

Windows Linux macOS

Install Keybase

With Keybase installed, you can drop files onto your own computer that are immediately signed and hosted on Keybase.pub. You can also write private, end-to-end encrypted files with anyone you know.

And it comes with an encrypted chat, too.