Fix lint indentation #2

SigmaHQ · Nov 30, 2023 · 96f4a38 · 96f4a38
1 parent dc170a5
commit 96f4a38
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/...threat-hunting/windows/process_creation/proc_creation_win_powershell_crypto_namespace.yml b/...threat-hunting/windows/process_creation/proc_creation_win_powershell_crypto_namespace.yml
@@ -22,11 +22,11 @@ logsource:
 detection:
     selection_img:
         - Image|endswith:
-            - '\powershell.exe'
-            - '\pwsh.exe'
+              - '\powershell.exe'
+              - '\pwsh.exe'
         - OriginalFileName:
-            - 'PowerShell.EXE'
-            - 'pwsh.dll'
+              - 'PowerShell.EXE'
+              - 'pwsh.dll'
     selection_cmdlet_namespace:
         CommandLine|contains: 'System.Security.Cryptography.'
     selection_cmdlet_classes: