diff --git a/rules/windows/powershell/powershell_nishang_malicious_commandlets.yml b/rules/windows/powershell/powershell_nishang_malicious_commandlets.yml
index c106426cc..0e6ca3972 100644
--- a/rules/windows/powershell/powershell_nishang_malicious_commandlets.yml
+++ b/rules/windows/powershell/powershell_nishang_malicious_commandlets.yml
@@ -75,7 +75,6 @@ detection:
         - TexttoExe
         - Powerpreter
         - Nishang
-        - EncodedData
         - DataToEncode
         - LoggedKeys
         - OUT-DNSTXT