Update detection-rules/predatory_academic_journal.yml

Co-authored-by: Luke Wescott <69780712+IndiaAce@users.noreply.github.com>

Author: peterdj45

detection-rules/predatory_academic_journal.yml

@@ -141,11 +141,13 @@ source: |
     any(body.links, regex.imatch(.href_url.path, '^/ey[a-z]/.{2,}$'))
   )
   
-  // don't match microsoft quarantine messages
+  // negate microsoft quarantine messages
   and not (
     any(body.links,
-        strings.icontains(.display_text, "Review Message")
-        or strings.icontains(.display_text, "Passer en revue le message")
+        (
+          strings.icontains(.display_text, "Review Message")
+          or strings.icontains(.display_text, "Passer en revue le message")
+        )
         and (
           .href_url.domain.domain == "security.microsoft.com"
           and .href_url.path == "/quarantine"