diff --git a/detections/web/microsoft_sharepoint_server_elevation_of_privilege.yml b/detections/web/microsoft_sharepoint_server_elevation_of_privilege.yml
index 06a63fd357..535d8604ac 100644
--- a/detections/web/microsoft_sharepoint_server_elevation_of_privilege.yml
+++ b/detections/web/microsoft_sharepoint_server_elevation_of_privilege.yml
@@ -60,5 +60,5 @@ tests:
 - name: True Positive Test
   attack_data:
   - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/sharepoint/sharepointeop.log
-      source: suricata
-      sourcetype: suricata
\ No newline at end of file
+    source: suricata
+    sourcetype: suricata
\ No newline at end of file