Added Rule - Microsoft Office Word Add-In Load (WLL)

[dr0pd34d]

Summary of the Pull Request

A new rule was added to be able to detect Microsoft Office Word Add-In image loads in order to detect initial access or persistence of a threat actor.

Changelog

new: Microsoft Word Add-In Loaded

Example Log Event

N/A

Fixed Issues

N/A

SigmaHQ Rule Creation Conventions

• If your PR adds new rules, please consider following and applying these conventions

[github-actions]

Welcome @dr0pd34d 👋

It looks like this is your first pull request on the Sigma rules repository!

Please make sure to read the SigmaHQ conventions document to make sure your contribution is adhering to best practices and has all the necessary elements in place for a successful approval.

Thanks again, and welcome to the Sigma community! 😃