Thanks!
moving rule maldoc_OLE_file_magic_number to utils/magic.yar

Update RANSOM_MS17-010_Wannacrypt.yar

Update APT_APT10.yar

fixed typos in original PR

Create MALW_adwind_RAT.yar

from https://minerva-labs.com/post/adwind-and-other-evasive-java-rats

Adding Rule https://www.cylance.com/en_us/blog/the-deception-project-a-new-japanese-centric-threat.html

Adding rule from Cylance https://www.cylance.com/en_us/blog/threat-spotlight-inside-the-wannacry-attack.html

Create RANSOM_DoublePulsar_Petya.yar

Booz Allen Hamilton YARA rule on Petya from https://www.boozallen.com/s/insight/publication/the-petya-ransomware-outbreak.html

Email_generic_phishing

Create RANSOM_Erebus.yar

Creating ransomware_PetrWrap.yar

Create Ransomware_Petya_MS17_010

From https://www.fireeye.com/blog/threat-research/2017/06/petya-ransomware-spreading-via-eternalblue-exploit.html

New ransomware rule created by kaspersky

changed condition to correct string

Generic rule to identify phishing emails

Create Email_fake_it_maintenance_bulletin

Rule to prevent against known phishing campaign targeting American companies using Microsoft Exchange.

CREATE MALW_LuaBot.yar

Create Email_quota_limit_warning

Added $eml strings and condition. Set condition value higher for $body, requiring more string matches to avoid FP.

YARA Rule for known phishing campaign affecting multiple American companies.

added apt28 downdelph rules

https://www.us-cert.gov/ncas/alerts/TA17-164A?platform=hootsuite