Cosmetics

2020-06-10 16:35:14 +02:00
parent 6c8c0cd85d
commit f553fb2e33
1 changed files with 5 additions and 5 deletions
@@ -17,14 +17,14 @@ logsource:
 detection:
    sec_settings:
      EventID:
-        - 12
-        - 13
+            - 12
+            - 13
      TargetObject|endswith:
            - '*\Security\Trusted Documents\TrustRecords'
            - '*\Security\AccessVBOM'
            - '*\Security\VBAWarnings'
      EventType:
-        - SetValue
-        - DeleteValue
-        - CreateValue
+            - SetValue
+            - DeleteValue
+            - CreateValue
    condition: sec_settings