Yara rules to be used in memory analysis