Edit File: yara-rt-scanner.toml
static_scan_glob = [ "/var/spool/cron/crontabs/*", "/home/*/*/*.php" #"/home/*/*/wp-include/*.php", #"/home/*/*/wp-content/*.php", #"/home/*/*/wp-admin/*.php" ] user_uid_floor=1 access_event_scan_chance=1