From 6e8df1e9d23d2a9ff4d45d652b26eb26a4e30758 Mon Sep 17 00:00:00 2001
From: Austin Songer <austin@songer.pro>
Date: Thu, 22 Jul 2021 11:05:54 -0500
Subject: [PATCH] Update sysmon_dns_over_https_enabled.yml

---
 .../windows/registry_event/sysmon_dns_over_https_enabled.yml  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/windows/registry_event/sysmon_dns_over_https_enabled.yml b/rules/windows/registry_event/sysmon_dns_over_https_enabled.yml
index feb47971c..3ca50cef1 100644
--- a/rules/windows/registry_event/sysmon_dns_over_https_enabled.yml
+++ b/rules/windows/registry_event/sysmon_dns_over_https_enabled.yml
@@ -6,10 +6,10 @@ status: experimental
 references:
     - https://www.tenforums.com/tutorials/151318-how-enable-disable-dns-over-https-doh-microsoft-edge.html
     - https://github.com/elastic/detection-rules/issues/1371
-	- https://chromeenterprise.google/policies/?policy=DnsOverHttpsMode
+    - https://chromeenterprise.google/policies/?policy=DnsOverHttpsMode
 tags:
     - attack.defense_evasion
-	- attack.t1140
+    - attack.t1140
 logsource:
   product: windows
   category: registry_event