From 550a592f78d64992c35dd9ce7b64d7a332e6ff0e Mon Sep 17 00:00:00 2001
From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Date: Wed, 16 Feb 2022 13:42:16 -0800
Subject: [PATCH] Re-adding newline

Adding newline back with proper format. Requires a backslash in front.
---
 .../unusual_number_of_kerberos_service_tickets_requested.yml   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/detections/endpoint/unusual_number_of_kerberos_service_tickets_requested.yml b/detections/endpoint/unusual_number_of_kerberos_service_tickets_requested.yml
index 6f52ce6dee..dbafa42be0 100644
--- a/detections/endpoint/unusual_number_of_kerberos_service_tickets_requested.yml
+++ b/detections/endpoint/unusual_number_of_kerberos_service_tickets_requested.yml
@@ -7,7 +7,8 @@ type: Anomaly
 datamodel: []
 description: The following hunting analytic leverages Kerberos Event 4769, A Kerberos service ticket was requested, to identify a potential kerberoasting attack
  against Active Directory networks. Kerberoasting allows an adversary to request kerberos tickets for domain accounts typically used as service accounts and 
- attempt to crack them offline allowing them to obtain privileged access to the domain. 
+ attempt to crack them offline allowing them to obtain privileged access to the domain.\
+ 
  The detection calculates the standard deviation for each host and leverages the
  3-sigma statistical rule to identify an unusual number service ticket requests. To customize this
  analytic, users can try different combinations of the `bucket` span time and the