diff --git a/rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml b/rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml
index 72250a717..2e038e954 100644
--- a/rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml
+++ b/rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml
@@ -8,7 +8,7 @@ description: Detects successful logon from public IP address via RDP. This can i
 references:
     - https://www.inversecos.com/2020/04/successful-4624-anonymous-logons-to.html
     - https://twitter.com/Purp1eW0lf/status/1616144561965002752
-author: Micah Babinski, @micahbabinski, Zach Mathis
+author: Micah Babinski (@micahbabinski), Zach Mathis (@yamatosecurity)
 date: 2023/01/19
 modified: 2023/03/16
 tags:
diff --git a/rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml b/rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml
index 19e07e8b5..f9d424e5c 100644
--- a/rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml
+++ b/rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml
@@ -8,7 +8,7 @@ description: Detects successful logon from public IP address via SMB. This can i
 references:
     - https://www.inversecos.com/2020/04/successful-4624-anonymous-logons-to.html
     - https://twitter.com/Purp1eW0lf/status/1616144561965002752
-author: Micah Babinski, @micahbabinski, Zach Mathis
+author: Micah Babinski (@micahbabinski), Zach Mathis (@yamatosecurity)
 date: 2023/01/19
 modified: 2023/03/16
 tags: