Merge pull request #1296 from mat-gas/fix-references

fix "references" field + add test for references in plural form

rules/web/win_webshell_regeorg.yml

@@ -5,7 +5,7 @@ description: Certain strings in the uri_query field when combined with null refe
 author: Cian Heasley
 date: 2020/08/04
 modified: 2020/09/03
-reference:
+references:
     - https://community.rsa.com/community/products/netwitness/blog/2019/02/19/web-shells-and-netwitness-part-3
     - https://github.com/sensepost/reGeorg
 logsource:
@@ -34,4 +34,4 @@ level: high
 tags:
     - attack.persistence
     - attack.t1100
-    - attack.t1505.003
+    - attack.t1505.003