[Rule Tuning] Update Index Pattern for Detection Engine Rules (#101)

* [Rule Tuning] Update Index Pattern for Detection Engine Rules

* update indices

rules/windows/execution_command_shell_started_by_powershell.toml

@@ -2,12 +2,12 @@
 creation_date = "2020/02/18"
 ecs_version = ["1.5.0"]
 maturity = "production"
-updated_date = "2020/06/24"
+updated_date = "2020/08/03"
 
 [rule]
 author = ["Elastic"]
 description = "Identifies a suspicious parent child process relationship with cmd.exe descending from PowerShell.exe."
-index = ["winlogbeat-*"]
+index = ["winlogbeat-*", "logs-endpoint.events.*"]
 language = "kuery"
 license = "Elastic License"
 name = "PowerShell spawning Cmd"