Exploit Prevention Expert Rules in ENS Threat Prevention don’t support YARA rules format. To add Expert Rules for YARA rules, you need to convert the YARA rules to Exploit Prevention Expert Rules format.

For detailed information about Expert Rules, see the Endpoint Security Threat Prevention Product Guide.

For assistance to convert YARA rules to Exploit Prevention Expert Rules format, contact McAfee Enterprise Professional Services.