diff --git a/rules/windows/registry_event/sysmon_dns_over_https_enabled.yml b/rules/windows/registry_event/sysmon_dns_over_https_enabled.yml
index feb47971c..3ca50cef1 100644
--- a/rules/windows/registry_event/sysmon_dns_over_https_enabled.yml
+++ b/rules/windows/registry_event/sysmon_dns_over_https_enabled.yml
@@ -6,10 +6,10 @@ status: experimental
 references:
     - https://www.tenforums.com/tutorials/151318-how-enable-disable-dns-over-https-doh-microsoft-edge.html
     - https://github.com/elastic/detection-rules/issues/1371
-	- https://chromeenterprise.google/policies/?policy=DnsOverHttpsMode
+    - https://chromeenterprise.google/policies/?policy=DnsOverHttpsMode
 tags:
     - attack.defense_evasion
-	- attack.t1140
+    - attack.t1140
 logsource:
   product: windows
   category: registry_event