Here is the YARA rule I used to detect "Orphaned VBA Projects Inside DWG Files".