diff --git a/rules/windows/builtin/win_ad_object_writedac_access.yml b/rules/windows/builtin/win_ad_object_writedac_access.yml
index 5f732c52f..b1e89e40c 100644
--- a/rules/windows/builtin/win_ad_object_writedac_access.yml
+++ b/rules/windows/builtin/win_ad_object_writedac_access.yml
@@ -16,7 +16,7 @@ detection:
     selection: 
         EventID: 4662
         ObjectServer: 'DS'
-        AccessMask: 0x40000
+        AccessMask: '0x40000'
         ObjectType:
             - '19195a5b-6da0-11d0-afd3-00c04fd930c9'
             - 'domainDNS'