From a73d37cd72c307e132343900a4bcba2f75332257 Mon Sep 17 00:00:00 2001
From: frack113 <62423083+frack113@users.noreply.github.com>
Date: Sat, 11 Sep 2021 14:22:01 +0200
Subject: [PATCH] fix related

---
 .../windows/malware/process_creation_mal_blue_mockingbird.yml | 4 ++--
 rules/windows/malware/registry_event_mal_blue_mockingbird.yml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/rules/windows/malware/process_creation_mal_blue_mockingbird.yml b/rules/windows/malware/process_creation_mal_blue_mockingbird.yml
index c1a9614b5..dc66bb56a 100644
--- a/rules/windows/malware/process_creation_mal_blue_mockingbird.yml
+++ b/rules/windows/malware/process_creation_mal_blue_mockingbird.yml
@@ -1,8 +1,8 @@
 title: Blue Mockingbird
 id: c3198a27-23a0-4c2c-af19-e5328d49680e
 related:
-    id: ce239692-aa94-41b3-b32f-9cab259c96ea
-    type: merged
+    - id: ce239692-aa94-41b3-b32f-9cab259c96ea
+      type: merged
 date: 2020/05/14
 modified: 2021/09/11
 status: experimental
diff --git a/rules/windows/malware/registry_event_mal_blue_mockingbird.yml b/rules/windows/malware/registry_event_mal_blue_mockingbird.yml
index d8eaebdaf..ba78af086 100644
--- a/rules/windows/malware/registry_event_mal_blue_mockingbird.yml
+++ b/rules/windows/malware/registry_event_mal_blue_mockingbird.yml
@@ -1,8 +1,8 @@
 title: Blue Mockingbird
 id: 92b0b372-a939-44ed-a11b-5136cf680e27
 related:
-    id: c3198a27-23a0-4c2c-af19-e5328d49680e
-    type: derived
+    - id: c3198a27-23a0-4c2c-af19-e5328d49680e
+      type: derived
 date: 2020/05/14
 modified: 2021/09/11
 status: experimental