MicrosoftHeikeRitter SHOUTING IN BOLD CAPS TO ASK FOR YARA RULE SUPPORT!!! 
08.12.2020 -- FireEye released https://github.com/fireeye/red_team_tool_countermeasures in response to APT hack where their custom Red Team tools were stolen. The whole point to their release was to help us detect employment in our environments. It seems to me that enabling YARA rule creation/ingestion/export would be something that MS should see as an OBVIOUS feature request with value and benefit.
As paying customers or as members of the security profession, do we really need to keep asking?
