Update rules/windows/process_creation/proc_creation_win_wsl_executed_from_unusual_directoy.yml

Co-authored-by: Swachchhanda Shrawan Poudel <87493836+swachchhanda000@users.noreply.github.com>

Author: Liran017

rules/windows/process_creation/proc_creation_win_wsl_executed_from_unusual_directoy.yml

@@ -27,7 +27,7 @@ detection:
     filter_main_legit_paths_3:
         Image|startswith: 'C:\Users'
         Image|contains: '\AppData\Local\Microsoft\WindowsApps\'
-    condition: selection_img and not (filter1 or filter2 or filter3)
+    condition: selection_img and not 1 of filter_main_*
 falsepositives:
     - Unlikely
 level: high