Add WEF Subscriptions for Exploit Guard ASR

[cryps1s]

Add WEF Subscription for Exploit Guard ASR.

EventIDs:

• 5007 | Event when settings are changed
• 1122 | Event when rule fires in Audit-mode
• 1121 | Event when rule fires in Block-mode

Reference: https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard

[cryps1s]

Closing as duplicate