YARA rule with this name could not be found