Add sample YARA rules

[mostlyfireproof]

https://github.com/Yara-Rules/rules

do the fancy git link thing