From 1317809f48b3264e2c99107458fbdf25a72cdf93 Mon Sep 17 00:00:00 2001
From: brightmt <50853930+brightmt@users.noreply.github.com>
Date: Fri, 27 Sep 2024 12:08:35 -0400
Subject: [PATCH] Update decompress-data.md

---
 micro-behaviors/data/decompress-data.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/micro-behaviors/data/decompress-data.md b/micro-behaviors/data/decompress-data.md
index 8c72867..631e6db 100644
--- a/micro-behaviors/data/decompress-data.md
+++ b/micro-behaviors/data/decompress-data.md
@@ -54,9 +54,9 @@ Malware may decompress data.
 |[decompress data using QuickLZ](https://github.com/mandiant/capa-rules/blob/master/data-manipulation/compression/decompress-data-using-quicklz.yml)|Decompress Data::QuickLZ (C0025.001)|--|
 |[decompress data using UCL](https://github.com/mandiant/capa-rules/blob/master/data-manipulation/compression/decompress-data-using-ucl.yml)|Decompress Data (C0025)|--|
 
-|Tool: CAPE|Mapping|APIs|
-|---|---|---|
-|[compression](https://github.com/kevoreilly/CAPEv2/blob/master/modules/signatures/CAPE.py)|Decompress Data (C0025)|RtlDecompressBuffer|
+|Tool: CAPE|Class|Mapping|APIs|
+|---|--|---|---|
+|[compression](https://github.com/kevoreilly/CAPEv2/blob/master/modules/signatures/CAPE.py)|CAPE_Compression|Decompress Data (C0025)|RtlDecompressBuffer|
 
 ## References