Inside an OPSEC Playbook: How Threat Actors Evade Detection