Tag Sigma rules for malware detection