YARA FROM IBM
https://securityintelligence.com/posts/observations-of-itg07-cyber-operations/