File Creation by Office Applications

This rule will monitor executable and script file creation by office applications. Please add more file extensions or magic bytes to the logic of your choice.