WAF + YARA