diff --git a/rules/windows/process_creation/proc_creation_win_hack_rubeus.yml b/rules/windows/process_creation/proc_creation_win_hack_rubeus.yml
index 3141d3079..290ec5b68 100644
--- a/rules/windows/process_creation/proc_creation_win_hack_rubeus.yml
+++ b/rules/windows/process_creation/proc_creation_win_hack_rubeus.yml
@@ -33,7 +33,6 @@ detection:
             - ' hash /password:'
             - ' golden /aes256:'
             - ' silver /user:'
-            - ' silver /user:'
     condition: selection
 falsepositives:
     - Unlikely