From 3c5c26f24396a67d430b89c3bc1a044a60ba00b5 Mon Sep 17 00:00:00 2001
From: patel-bhavin <bhavin.j.patel91@gmail.com>
Date: Tue, 13 Dec 2022 14:41:48 -0800
Subject: [PATCH] minor fix

---
 .../winevent_windows_task_scheduler_event_action_started.yml    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/detections/endpoint/winevent_windows_task_scheduler_event_action_started.yml b/detections/endpoint/winevent_windows_task_scheduler_event_action_started.yml
index 15c5181d89..ddfd760714 100644
--- a/detections/endpoint/winevent_windows_task_scheduler_event_action_started.yml
+++ b/detections/endpoint/winevent_windows_task_scheduler_event_action_started.yml
@@ -35,7 +35,7 @@ tags:
   - DarkCrystal RAT
   - CISA AA22-257A
   - Qakbot
-  -   - Prestige Ransomware
+  - Prestige Ransomware
   confidence: 100
   context:
   - Source:Endpoint