diff --git a/rules/windows/process_creation/sysmon_apt_muddywater_dnstunnel.yml b/rules/windows/process_creation/sysmon_apt_muddywater_dnstunnel.yml
index f5b6e57dd..ab6cd5db3 100644
--- a/rules/windows/process_creation/sysmon_apt_muddywater_dnstunnel.yml
+++ b/rules/windows/process_creation/sysmon_apt_muddywater_dnstunnel.yml
@@ -24,5 +24,5 @@ detection:
             - 'DataExchange.dll'
     condition: selection
 falsepositives:
-    - Unkown
+    - Unknown
 level: critical