Update DomainEntity_PaloAlto.yaml

Update the CommonSecurityLog lookup based on ingestion time.

Detections/ThreatIntelligenceIndicator/DomainEntity_PaloAlto.yaml

@@ -36,7 +36,8 @@ query: |
         | where isnotempty(DomainName)
         | join (
             CommonSecurityLog
-            | where TimeGenerated > ago(dt_lookBack)
+            | extend IngestionTime = ingestion_time()
+            | where IngestionTime > ago(dt_lookBack)
             | where DeviceVendor =~ 'Palo Alto Networks'
             | where DeviceEventClassID =~ 'url'
             //Uncomment the line below to only alert on allowed connections