Update rules/detection-rules.json

Co-authored-by: Copilot <[email protected]>
Signed-off-by: John Duprey <[email protected]>

Author: JohnDuprey

rules/detection-rules.json

@@ -18,7 +18,8 @@
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*office365\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*sharepoint\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*onedrive\\.com$",
-    "^https:\\/\\/(?!login\\.live\\.com$)([a-zA-Z0-9-]+\\.)*live\\.com$",
+    "^https:\\/\\/live\\.com$",
+    "^https:\\/\\/(?!login\\.)[a-zA-Z0-9-]+(\\.[a-zA-Z0-9-]+)*\\.live\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*hotmail\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*outlook\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*azure\\.(com|cn|net)$",