Yara tag modification

[WilliamSalusky]

When a yara rule fires the rule name is stored as a standalone tag. Can it be modified to be stored as 'yara:${yara_rulename}', so that I can search for tags == "yara:*"

Additionally, yara rules support its own tags that would make groups of rules easier to search.

ex.
rule yara_rulename: TAG1 TAG2 TAG3
{
blah
}

Can you work with that?

[awick]

Added in 272f463