Update attachment_legal_pdf.yml

Author: zoomequipd

detection-rules/attachment_legal_pdf.yml

@@ -97,7 +97,7 @@ source: |
                       // foreign language indicators
                       or regex.icontains(.scan.ocr.raw,
                                          'pornograph(y|ie)',
-                                         'interpol',
+                                         'interpol\b',
                                          'europol',
                                          'dissuade',
                                          // French indicators, seen in threatening language