fix: apply suggestions from code review

Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>

rules/windows/powershell/powershell_script/posh_ps_audio_exfiltration.yml

@@ -10,7 +10,7 @@ tags:
     - attack.exfiltration
 logsource:
     product: windows
-    service: powershell
+    category: ps_script
     definition: 'Requirements: Script Block Logging must be enabled'
 detection:
     selection_main:

rules/windows/process_creation/proc_creation_win_susp_psloglist.yml

@@ -25,7 +25,7 @@ detection:
             - '\psloglist.exe'
             - '\psloglist64.exe'
     selection_cli_eventlog:
-        CommandLine|contains|all:
+        CommandLine|contains:
             - ' security'
             - ' application'
             - ' system'