From 9b15b64a9ab6b71651c88712a17ad94862cddd41 Mon Sep 17 00:00:00 2001
From: Florian Roth <venom14@gmail.com>
Date: Wed, 5 Dec 2018 11:44:14 +0100
Subject: [PATCH] fix: fixed author string (cannot be list according to sigma
 specs)

---
 rules/apt/apt_unidentified_nov_18.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/rules/apt/apt_unidentified_nov_18.yml b/rules/apt/apt_unidentified_nov_18.yml
index 4eba43a8..aab42be6 100644
--- a/rules/apt/apt_unidentified_nov_18.yml
+++ b/rules/apt/apt_unidentified_nov_18.yml
@@ -4,8 +4,7 @@ status: stable
 description: A sigma rule detecting an unidetefied attacker who used phishing emails to target high profile orgs on November 2018. The Actor shares some TTPs with YYTRIUM/APT29 campaign in 2016.
 references:
     - https://twitter.com/DrunkBinary/status/1063075530180886529
-author: 
-    - "@41thexplorer, Windows Defender ATP"
+author: "@41thexplorer, Windows Defender ATP"
 date: 2018/11/20
 tags:
     - attack.execution