diff --git a/tools/sigma/parser/modifiers/transform.py b/tools/sigma/parser/modifiers/transform.py
index 8a5267999..b66eaf9c9 100644
--- a/tools/sigma/parser/modifiers/transform.py
+++ b/tools/sigma/parser/modifiers/transform.py
@@ -72,7 +72,7 @@ class SigmaAllValuesModifier(SigmaTransformModifier):
         cond = ConditionAND()
         for val in self.value:
             cond.add(val)
-        return cond
+        return NodeSubexpression(cond)
 
 class SigmaBase64Modifier(ListOrStringModifierMixin, SigmaTransformModifier):
     """Encode strings with Base64"""