Rules for Rustdesk

[frack113]

Summary of the Pull Request

Detect the use of Rustdesk. when use for the fisrt time official binary create rustdesk.exe in the Appdata folder

As it can be use as portable version I check the dll too

Changelog

new: Rustdesk Temporary Artefact new: Load Of Rustdesk Desktop_multi_window_plugin DLL

Example Log Event

Use of https://rustdesk.com/ version 1.3.8

Use it as portable

Fixed Issues

SigmaHQ Rule Creation Conventions

• If your PR adds new rules, please consider following and applying these conventions