detection-engineering 1 From php2shell to Detection: Hunting Obfuscated PHP Web Shells with Sigma Oct 25, 2026