yara

type Config struct {
	Title         string   // A short description of what this configuration does
	Order         int      // Defines the order of expansion when multiple config files are applicable
	Backends      []string // Lists the Sigma implementations that this config file is compatible with
	FieldMappings map[string]FieldMapping
	Placeholders  map[string][]interface{} // Defines values for placeholders that might appear in Yara rules
}

type FieldMapping struct {
	TargetNames []string // The name(s) that appear in the events being matched

}