Use go-yara within the agent. Go now supports the `embed` feature, which means we can embed default yara rules within the agent binary. Another possible solution is to depend on a third-party yara scanner binary which is transferred to the VM.