Added rawpos yara rules