992e70032e
Most likely it comes from a bad parsing by Sigma2Splunkalert but since it is unmaintained and this is the only rule with a comma in title, this is the easy fix. Error in 'inputlookup' command: Invalid argument: '_Privileged_Console_Access_whitelist.csv' [| inputlookup "Using_Sticky-keys_To_Obtain_Unauthenticated,_Privileged_Console_Access_whitelist.csv]