Yara is pretty much the industry standard for detection rules now.