New Sigma Rule Pack Released for Living-off-the-Land Binaries

[SEED CONTENT — replace] Short-form placeholder item seeded to exercise the /briefs layout.

The pack focuses on binaries frequently abused for defense evasion — rundll32, mshta, and certutil among them — with tuning notes included for each rule to reduce false positives against common enterprise software.