Update rules/windows/builtin/bits_client/win_bits_client_new_transfer_saving_susp_extensions.yml

Author: nasbench

rules/windows/builtin/bits_client/win_bits_client_new_transfer_saving_susp_extensions.yml

@@ -32,8 +32,6 @@ detection:
         # Typical updates: Chrome, Dropbox etc.
         LocalName|contains: '\AppData\'
         RemoteName|contains: '.com'
-    filter_optional_microsoft:
-        RemoteName|contains: '.microsoft.com'
     condition: selection and not 1 of filter_optional_*
 falsepositives:
     - While the file extensions in question can be suspicious at times. It's best to add filters according to your environment to avoid large amount false positives