Update proc_creation_win_discovery_via_reg_queries.yml

trailing spaceremoved
SigmaHQ · Jan 20, 2025 · 33a8c8f · 33a8c8f
1 parent ee633c9
commit 33a8c8f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/windows/process_creation/proc_creation_win_discovery_via_reg_queries.yml b/rules/windows/process_creation/proc_creation_win_discovery_via_reg_queries.yml
@@ -23,7 +23,7 @@ detection:
         Image|endswith:
             - '\powershell.exe'
             - '\pwsh.exe'
-        CommandLine|contains: 
+        CommandLine|contains:
             - 'Get-ItemPropertyValue'
             - 'gpv'
     selection_keys: