add rule for contribute

Summary of the Pull Request

This pull request introduces a new Sigma rule designed to detect exploitation attempts associated with CVE-2024-38063. The rule identifies specific network traffic patterns that may indicate an attempt to exploit memory corruption vulnerabilities in systems using IPv6.

Changelog

new: CVE-2024-38063_ipv6_memory_corruption_detection.yml - Adds a rule for detecting suspicious IPv6 packet patterns that may indicate exploitation of CVE-2024-38063.

Example Log Event

{
    "protocol": "IPv6",
    "events": {
        "FragmentationEvent": true,
        "AnomalousIPv6OptionHeaderEvent": true
    },
    "packet_length": "1337",
    "src_ip": "2001:db8::1",
    "dst_ip": "2001:db8::2",
    "info": "Detected packet with potentially malicious fragmentation and option headers"
}

Fixed Issues

https://techcommunity.microsoft.com/t5/windows-server-for-it-pro/cve-2024-38063-disabling-ipv6-binding-fix-or-not/td-p/4220374

SigmaHQ Rule Creation Conventions

• If your PR adds new rules, please consider following and applying these conventions