Look at YARA-X for Velociraptor YARA engine

[mgreen27-r7]

Working with yara-x today, its a much easier experience writing rules with error notifications and as there is a go specific library it might be worth us considering using it in Velociraptor as it matures. The api would need a refactor, however future effort of updating new versions would be much easier.

https://github.com/VirusTotal/yara-x
https://virustotal.github.io/yara-x/docs/intro/getting-started/