From 7a334a8d8a33d9d2aeeaca34816c4e52b0a87274 Mon Sep 17 00:00:00 2001
From: Florian Roth <venom14@gmail.com>
Date: Tue, 9 Jun 2020 17:30:54 +0200
Subject: [PATCH] fix: missed line

---
 rules/windows/sysmon/sysmon_apt_muddywater_dnstunnel.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/windows/sysmon/sysmon_apt_muddywater_dnstunnel.yml b/rules/windows/sysmon/sysmon_apt_muddywater_dnstunnel.yml
index 3cf7b3099..3bb4c1aae 100644
--- a/rules/windows/sysmon/sysmon_apt_muddywater_dnstunnel.yml
+++ b/rules/windows/sysmon/sysmon_apt_muddywater_dnstunnel.yml
@@ -21,7 +21,7 @@ detection:
             - '\excel.exe'
         CommandLine|contains:
             - 'DataExchange.dll'
-  condition: selection
+    condition: selection
 falsepositives:
     - Unkown
 level: critical