cis-dil-benchmark-3.5.1.3 and cis-dil-benchmark-3.5.2.3 should include conntrack module

[fargburger]

Is your feature request related to a problem? Please describe.
cis benchmarks show false negative errors, conntrack is equivalent or better than state module for iptables.

Describe the solution you'd like
Running inspec against ubuntu devices using conntrack module for connection tracking should validate

-m conntrack --ctstate NEW,ESTABLISHED
as well as
-m state --state NEW,ESTABLISHED

Describe alternatives you've considered
Add -m state after -m conntrack works, but adds unnecessary lines to iptables

Additional context
Add any other context or screenshots about the feature request here.