YARA beyond files: extending rules to network IoCs
blog.virustotal.com