From 30260e8bf7fd9459c308e16a71a3cae647a40b6b Mon Sep 17 00:00:00 2001
From: frack113 <62423083+frack113@users.noreply.github.com>
Date: Mon, 9 Aug 2021 10:07:26 +0200
Subject: [PATCH] formatting falsepositives

---
 rules/cloud/azure_kubernetes_network_policy_change.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rules/cloud/azure_kubernetes_network_policy_change.yml b/rules/cloud/azure_kubernetes_network_policy_change.yml
index 85317337..15163d6e 100644
--- a/rules/cloud/azure_kubernetes_network_policy_change.yml
+++ b/rules/cloud/azure_kubernetes_network_policy_change.yml
@@ -25,4 +25,5 @@ tags:
     - attack.impact
     - attack.credential_access
 falsepositives:
- - Network Policy being modified and deleted may be performed by a system administrator. Verify whether the user identity, user agent, and/or hostname should be making changes in your environment. Network Policy being modified and deleted from unfamiliar users should be investigated. If known behavior is causing false positives, it can be exempted from the rule.
+ - Network Policy being modified and deleted may be performed by a system administrator. Verify whether the user identity, user agent, and/or hostname should be making changes in your environment.
+ - Network Policy being modified and deleted from unfamiliar users should be investigated. If known behavior is causing false positives, it can be exempted from the rule.