Add Careto yara rules