From ec2c559365013f02c19f098eb770ec2b61823c23 Mon Sep 17 00:00:00 2001
From: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
Date: Fri, 19 May 2023 02:42:17 +0200
Subject: [PATCH] fix: typo in field name

---
 .../proxy_malware_small_sieve_telegram_communication.yml        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules-emerging-threats/2021/Malware/Small-Sieve/proxy_malware_small_sieve_telegram_communication.yml b/rules-emerging-threats/2021/Malware/Small-Sieve/proxy_malware_small_sieve_telegram_communication.yml
index 98dfc11d0..427b27565 100644
--- a/rules-emerging-threats/2021/Malware/Small-Sieve/proxy_malware_small_sieve_telegram_communication.yml
+++ b/rules-emerging-threats/2021/Malware/Small-Sieve/proxy_malware_small_sieve_telegram_communication.yml
@@ -14,7 +14,7 @@ detection:
     selection:
         cs-method: 'GET'
         cs-host: 'api.telegram.org'
-        cs-uri-query|contains|all:
+        cs-uri|contains|all:
             - 'chat_id=2090761833'
             - 'text=com/'
     condition: selection