Rustywater Muddywater rust based evolution
Detects potential MuddyWater/RustyWater malware execution chains by identifying Office applications spawning scripting engines, LOLBins, or known campaign-related payloads from attacker-favored writable directories.
CQL

