Update YARAForge rules, refresh testdata

[tstromberg]

New rules

+CAPE_Agentteslav3Jit
+CAPE_Al_Khaser
+CAPE_Anticuckoo
+CAPE_Blister_1
+CAPE_Bruteratelconfig
+CAPE_Bruterateldate
+CAPE_Bruteratelpacker
+CAPE_Bruteratelsyscall
+CAPE_Buerloader_1
+CAPE_Bumblebeeshellcode_1
+CAPE_Darkgateloader
+CAPE_Dridexloader_1
+CAPE_Emotetpacker
+CAPE_Formconfa
+CAPE_Formconfb
+CAPE_Formconfc
+CAPE_Formhelper
+CAPE_Formhooka
+CAPE_Formhookb
+CAPE_Gettickcountantivm
+CAPE_Guloaderprecursor
+CAPE_Heavenssyscall
+CAPE_Icedidhook
+CAPE_Icedidpackera
+CAPE_Icedidpackerb
+CAPE_Icedidpackerc
+CAPE_Icedidpackerd
+CAPE_Icedidsyscallwritemem
+CAPE_Icedsleep
+CAPE_Latrodectus_1
+CAPE_Lumma_1
+CAPE_Lummaremap
+CAPE_Modiloader
+CAPE_Mysterysnail
+CAPE_NSIS
+CAPE_Pafish_1
+CAPE_Pikahook
+CAPE_Pikexport
+CAPE_Qakbot4_1
+CAPE_Qakbot5_1
+CAPE_Qakbotantivm
+CAPE_Qakbotloader
+CAPE_Rdtscpantivm
+CAPE_Rhadamanthys_1
+CAPE_Risepro
+CAPE_Singlestepantihook
+CAPE_Slowloader
+CAPE_Smokeloader_1
+CAPE_Stealcanti
+CAPE_Stealcstrings
+CAPE_Syscall
+CAPE_Themida
+CAPE_UPX
+CAPE_Ursnifv3_1
+CAPE_Vbcrypter
+CAPE_Xworm
+CAPE_Zloader_1
+CAPE_Zloader_2024
+COD3NYM_Confuserex_Naming_Pattern
+COD3NYM_Confuserex_Packer
+COD3NYM_Eazfuscator_Code_Virtualization
+COD3NYM_Eazfuscator_String_Encryption
+COD3NYM_Reactor_Indicators
+COD3NYM_Singlefilehost_App_Bundle
+DITEKSHEN_INDICATOR_RMM_Dwagentlib
+DITEKSHEN_INDICATOR_RMM_Dwagent_Screencapture
+DITEKSHEN_INDICATOR_RMM_Dwagent_Soundcapture
+DITEKSHEN_INDICATOR_RMM_Dwagentsvc
+DITEKSHEN_INDICATOR_TOOL_Chromekatz
+DITEKSHEN_INDICATOR_TOOL_Edrprison
+DITEKSHEN_INDICATOR_TOOL_Edrsilencer
+DITEKSHEN_INDICATOR_TOOL_Krbrelay
+DITEKSHEN_INDICATOR_TOOL_Sharpsqlpwn
+DITEKSHEN_MALWARE_Multi_Pondrat
+DITEKSHEN_MALWARE_Multi_POOLRAT
+DITEKSHEN_MALWARE_Win_Cicada3301
+DITEKSHEN_MALWARE_Win_Fakecaptcha_Downloader
+DITEKSHEN_MALWARE_Win_Xenorat
+REVERSINGLABS_Bytecode_MSIL_Backdoor_Orcusrat
+REVERSINGLABS_Linux_Backdoor_GTPDOOR
+RUSSIANPANDA_Legionloader_Dropper
+RUSSIANPANDA_Lummac2
+RUSSIANPANDA_Meduzastealer
+SIGNATURE_BASE_EXPL_LNX_CUPS_CVE_2024_47177_Sep24
+SIGNATURE_BASE_SUSP_EXPL_LNX_CUPS_CVE_2024_47177_Sep24

NOTE: Includes fix for the refresh script to support xargs on Linux