Revert "Revert "Changed the rule to download only and not the copy""

This reverts commit b0ddaf5ac9.

rules/windows/process_creation/win_susp_replace_lolbin.yml

@@ -1,6 +1,6 @@
 title: Ingress Tool Transfer Using Replace.exe
 id: 6ccf0c00-1061-4195-a724-6d9c0058b036
-description: Detect Copy and Download operations using Replace.exe.
+description: Detect Download operations using Replace.exe.
 status: experimental
 references:
   - https://lolbas-project.github.io/lolbas/Binaries/Replace
@@ -16,10 +16,10 @@ detection:
   selection:
     Image|endswith:
       - '\replace.exe'
-    CommandLine|contains:
+    CommandLine|contains|all:
       - "\\\\\\\\"
       - "/A"
   condition: selection
 falsepositives:
-  - Legitimate use of the binary
+  - Legitimate use of the binary to download files from a share
 level: low