diff --git a/rules/windows/registry/registry_event/registry_event_net_ntlm_downgrade.yml b/rules/windows/registry/registry_event/registry_event_net_ntlm_downgrade.yml
index ad6b41b1722..824a735dfc1 100644
--- a/rules/windows/registry/registry_event/registry_event_net_ntlm_downgrade.yml
+++ b/rules/windows/registry/registry_event/registry_event_net_ntlm_downgrade.yml
@@ -23,9 +23,9 @@ detection:
     selection_lmcompatibilitylevel:
         TargetObject|endswith: '\lmcompatibilitylevel'
         Details:
-            - '0'
-            - '1'
-            - '2'
+            - 0
+            - 1
+            - 2
     selection_ntlmminclientsec:
         TargetObject|endswith:
             - '\NtlmMinClientSec'