New rule system language discovery via reg.exe

[marcopedrinazzi]

Summary of the Pull Request

I have reopened #5840 due to a limitation of github that did not allow maintainers to make edits in pull requests in a cross-organization setting. https://github.com/orgs/community/discussions/5634

This pull request adds a new rule - System Language Discovery via reg.exe based on https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1614.001/T1614.001.md

I've also pushed the evtx and the info.yml for regression testing

Changelog

new: System Language Discovery via reg.exe

Example Log Event

Process Create:
Image: C:\Windows\System32\reg.exe
OriginalFileName: reg.exe
CommandLine: reg  query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\Language
ParentImage: C:\Windows\System32\cmd.exe
ParentCommandLine: C:\WINDOWS\System32\cmd.exe

Fixed Issues

SigmaHQ Rule Creation Conventions

• If your PR adds new rules, please consider following and applying these conventions

[nasbench]

Note for myself to double check this before merge.