Rustywater Muddywater rust based evolution

Detects potential MuddyWater/RustyWater malware execution chains by identifying Office applications spawning scripting engines, LOLBins, or known campaign-related payloads from attacker-favored writable directories.