Adding more filters

Author: djlukic

rules-threat-hunting/windows/builtin/appxdeployment_server/win_appxpackaging_server_successful_package_installation.yml

@@ -19,7 +19,9 @@ logsource:
 detection:
     selection:
         EventID: 854
-    condition: selection
+    filter_optional_x_windowsupdate:
+        Path|contains: 'x-windowsupdate://'
+    condition: selection and not 1 of filter_optional_*
 falsepositives:
     - Legitimate MSIX/AppX package installations
 level: low