theopolis: if we should be duping a radar to ask for a public framework with which to interact with xprotect's yara signatures please let me know, it's this month or never