Detects inbound MS OOXML attachments (.pptx and other OOXML files) where the file creator metadata is listed as 'Administrator' and the total edit time is zero, while the TitlesOfParts metadata field is absent. This pattern can indicate programmatically generated or suspicious presentations that may be used to deliver malware or evade detection. The rule filters attachments by file_type (pptx, docx), analyzes EXIF metadata via beta.parse_exif to verify Creator == 'Administrator', checks for a field with key TotalEditTime and value '0', and ensures TitlesOfParts is not present among the EXIF fields.