diff --git a/detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml b/detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml
index 7e38a8b3c5..0524d51310 100644
--- a/detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml
+++ b/detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml
@@ -33,7 +33,8 @@ tags:
   analytic_story:
   - RedLine Stealer
   asset_type: Endpoint
-  atomic_guid: 12e03af7-79f9-4f95-af48-d3f12f28a260
+  atomic_guid: 
+  - 12e03af7-79f9-4f95-af48-d3f12f28a260
   confidence: 70
   impact: 70
   message: A registry modification to disable Windows Defender notification on $dest$