From be43ecd70db63098b7209f2e596ef68c4978ca74 Mon Sep 17 00:00:00 2001
From: frack113 <62423083+frack113@users.noreply.github.com>
Date: Tue, 24 Aug 2021 07:57:16 +0200
Subject: [PATCH] Remove empty element in list

Otherwise get a `null` when convert to some backend (es-rule,...)
---
 .../zeek/zeek_dce_rpc_printnightmare_print_driver_install.yml  | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/rules/network/zeek/zeek_dce_rpc_printnightmare_print_driver_install.yml b/rules/network/zeek/zeek_dce_rpc_printnightmare_print_driver_install.yml
index 390edb4da..e6e840850 100644
--- a/rules/network/zeek/zeek_dce_rpc_printnightmare_print_driver_install.yml
+++ b/rules/network/zeek/zeek_dce_rpc_printnightmare_print_driver_install.yml
@@ -13,7 +13,6 @@ references:
     - https://github.com/SigmaHQ/sigma/blob/master/rules/network/zeek/zeek_dce_rpc_mitre_bzar_persistence.yml
     - https://old.zeek.org/zeekweek2019/slides/bzar.pdf
     - https://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory/
-    - 
 tags:
     - attack.execution
     - cve.2021-1675
@@ -42,4 +41,4 @@ fields:
     - endpoint
     - named_pipe
     - uid
-status: stable
\ No newline at end of file
+status: stable