Update rtf_rules.yara