Yara Windows Malware Boilerplate

rule windowsmalware{
	meta:
		description = "Windows malware"
	strings:
		$s = "Software\\Microsoft\\Windows\\CurrentVersion\\Run"
	condition:
		$s
}