diff --git a/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml b/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml
index f87a9852e..9091c9a2e 100644
--- a/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml
+++ b/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml
@@ -10,7 +10,7 @@ tags:
     - attack.t1059.001
     - attack.defense_evasion 
     - attack.t1127
-author: Agro (@agro_sev) oscd.community
+author: 'Agro (@agro_sev)' oscd.community
 date: 2020/10/13
 logsource:
     category: process_creation