Update link_fake_fax_low_reputation.yml (#3086)

Author: markmsublime

detection-rules/link_fake_fax_low_reputation.yml

@@ -31,6 +31,7 @@ source: |
             strings.icontains(., "New Fax Received")
             or strings.icontains(., "e-Fax Document")
             or strings.icontains(., "Fax Status")
+            or strings.icontains(., "Fax ID")
             or strings.icontains(., "New Fax Document")
             or regex.icontains(., "(?:received|have) a (?:new )?fax")
             or regex.icontains(., "to view (th(?:e|is) )?(?:fax|message)")