diff --git a/rules/windows/malware/process_creation_mal_blue_mockingbird.yml b/rules/windows/malware/process_creation_mal_blue_mockingbird.yml
index c1a9614b5..dc66bb56a 100644
--- a/rules/windows/malware/process_creation_mal_blue_mockingbird.yml
+++ b/rules/windows/malware/process_creation_mal_blue_mockingbird.yml
@@ -1,8 +1,8 @@
 title: Blue Mockingbird
 id: c3198a27-23a0-4c2c-af19-e5328d49680e
 related:
-    id: ce239692-aa94-41b3-b32f-9cab259c96ea
-    type: merged
+    - id: ce239692-aa94-41b3-b32f-9cab259c96ea
+      type: merged
 date: 2020/05/14
 modified: 2021/09/11
 status: experimental
diff --git a/rules/windows/malware/registry_event_mal_blue_mockingbird.yml b/rules/windows/malware/registry_event_mal_blue_mockingbird.yml
index d8eaebdaf..ba78af086 100644
--- a/rules/windows/malware/registry_event_mal_blue_mockingbird.yml
+++ b/rules/windows/malware/registry_event_mal_blue_mockingbird.yml
@@ -1,8 +1,8 @@
 title: Blue Mockingbird
 id: 92b0b372-a939-44ed-a11b-5136cf680e27
 related:
-    id: c3198a27-23a0-4c2c-af19-e5328d49680e
-    type: derived
+    - id: c3198a27-23a0-4c2c-af19-e5328d49680e
+      type: derived
 date: 2020/05/14
 modified: 2021/09/11
 status: experimental