Update rules/windows/discovery_host_public_ip_address_lookup.toml

Co-authored-by: Jonhnathan <[email protected]>

Author: Samirbous

rules/windows/discovery_host_public_ip_address_lookup.toml

@@ -80,7 +80,7 @@ network where host.os.type == "windows" and dns.question.name != null and
 
   ?process.code_signature.exists == false or ?process.code_signature.trusted == false or
 
-  ?process.code_signature.subject_name in ("AUTOIT CONSULTING LTD", "AutoIt Consulting Ltd", "OpenJS Foundation", "Python Software Foundation") or
+  ?process.code_signature.subject_name : ("AutoIt Consulting Ltd", "OpenJS Foundation", "Python Software Foundation") or
 
   ?process.executable : ("?:\\Users\\*.exe", "", "?:\\ProgramData\\*.exe",  "?\\Device\\HarddiskVolume?\\Users\\*.exe",  "?\\Device\\HarddiskVolume?\\ProgramData\\*.exe")
  ) and