diff --git a/rules/windows/powershell/powershell_malicious_commandlets.yml b/rules/windows/powershell/powershell_malicious_commandlets.yml
index 50c5baf50..ad4609d8d 100644
--- a/rules/windows/powershell/powershell_malicious_commandlets.yml
+++ b/rules/windows/powershell/powershell_malicious_commandlets.yml
@@ -8,7 +8,7 @@ tags:
     - attack.execution
     - attack.t1059.001
     - attack.t1086  #an old one
-author: Sean Metcalf (source), Florian Roth (rule)
+author: Sean Metcalf (source), Florian Roth (rule), Bartlomiej Czyz @bczyz1 (update), oscd.community (update)
 date: 2017/03/05
 modified: 2020/10/11
 logsource: