Fix the yara test

default rules are now added in alphabetic order.