From d1fb0e3767685b0cccded347d186be705460ceff Mon Sep 17 00:00:00 2001
From: TheLawsOfChaos <TheLawsOfChaos@users.noreply.github.com>
Date: Tue, 7 Feb 2023 16:02:33 -0500
Subject: [PATCH] Update
 windows_service_created_with_suspicious_service_path.yml

---
 .../windows_service_created_with_suspicious_service_path.yml  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/detections/endpoint/windows_service_created_with_suspicious_service_path.yml b/detections/endpoint/windows_service_created_with_suspicious_service_path.yml
index a1c31ce7b4..27c75d6109 100644
--- a/detections/endpoint/windows_service_created_with_suspicious_service_path.yml
+++ b/detections/endpoint/windows_service_created_with_suspicious_service_path.yml
@@ -41,7 +41,7 @@ tags:
   kill_chain_phases:
   - Exploitation
   message: A service $Service_File_Name$ was created from a non-standard path using
-    $Service_Name $
+    $Service_Name$
   mitre_attack_id:
   - T1569
   - T1569.002
@@ -67,7 +67,7 @@ tags:
   - Service_File_Name
   - Service_Type
   - _time
-  - Service_Name 
+  - Service_Name
   - Service_Start_Type
   - dest
   risk_score: 56