NIDS based around hooking yara into callbacks