Text this: Identification of malware activities with rules