Change status for old rules

rules/windows/process_creation/win_visual_basic_compiler.yml

@@ -1,22 +1,23 @@
 title: Visual Basic Command Line Compiler Usage
 id: 7b10f171-7f04-47c7-9fa2-5be43c76e535
-status: experimental
+status: test
 description: Detects successful code compilation via Visual Basic Command Line Compiler that utilizes Windows Resource to Object Converter.
+author: 'Ensar Şamil, @sblmsrsn, @oscd_initiative'
 references:
-    - https://lolbas-project.github.io/lolbas/Binaries/Vbc/
-author: 'Ensar Şamil, @sblmsrsn, @oscd_initiative' 
+  - https://lolbas-project.github.io/lolbas/Binaries/Vbc/
 date: 2020/10/07
-tags:
-    - attack.defense_evasion
-    - attack.t1027.004
+modified: 2021/11/27
 logsource:
-    category: process_creation
-    product: windows
+  category: process_creation
+  product: windows
 detection:
-    selection:
-        ParentImage|endswith: '\vbc.exe'
-        Image|endswith: '\cvtres.exe'
-    condition: selection
+  selection:
+    ParentImage|endswith: '\vbc.exe'
+    Image|endswith: '\cvtres.exe'
+  condition: selection
 falsepositives:
-    - Utilization of this tool should not be seen in enterprise environment
+  - Utilization of this tool should not be seen in enterprise environment
 level: high
+tags:
+  - attack.defense_evasion
+  - attack.t1027.004