New mft detection rules

[Baniur]

New rules including detection for RRM tools artefacts:

1. Atera Agent
2. MeshAgent
3. Splashtop

Other detections rules for:

1. svchost.exe masquerading
2. svchost.exe in a different location than standard. Potential Malicious Activity.
3. TokenDuplicator artifacts - https://github.com/magnusstubman/tokenduplicator/
4. PsExec artifacts (ps64.exe added to original detection rule)