Writing and testing YARA rules for malware detection, threat hunting, and file classification with rule validation and false-positive rate testing.