Fixing condition

Author: djordje-binalyze

rules/windows/powershell/powershell_script/posh_ps_susp_set_alias.yml

@@ -38,7 +38,7 @@ detection:
             - ' -Name ncim -Value New-CimInstance '
             - ' -Name rcim -Value Remove-cimInstance '
             - ' -Name icim -Value Invoke-CimMethod '
-    condition: selection and not 1 of filter_main
+    condition: selection and not 1 of filter_main_*
 falsepositives:
     - Unknown
 level: low