Add more ref

rules/windows/powershell/powershell_script/posh_ps_x509enrollment.yml

@@ -7,6 +7,7 @@ status: experimental
 description: Detect use of X509Enrollment
 references:
     - https://speakerdeck.com/heirhabarov/hunting-for-powershell-abuse?slide=42
+    - https://speakerdeck.com/heirhabarov/hunting-for-powershell-abuse?slide=41
     - https://learn.microsoft.com/en-us/dotnet/api/microsoft.hpc.scheduler.store.cx509enrollmentwebclassfactoryclass?view=hpc-sdk-5.1.6115
 author: frack113
 date: 2022/12/23