Update file_event_macos_malware_amos_persistence.yml

whitespace fix

Author: JasonPhang98

rules-emerging-threats/2025/Malware/Atomic-MacOS-Stealer/file_event_macos_malware_amos_persistence.yml

@@ -15,16 +15,16 @@ logsource:
     category: file_event
     product: macos
 detection:
-   selection_user_helper:
-     TargetFilename|contains|all:
-       - '/Users/'
-       - '.helper'
-   selection_user_agent:
-     TargetFilename|contains|all:
-       - '/Users/'
-       - '.agent'
-   selection_launchdaemon:
-     TargetFilename|endswith: '/Library/LaunchDaemons/com.finder.helper.plist'
+    selection_user_helper:
+      TargetFilename|contains|all:
+        - '/Users/'
+        - '.helper'
+    selection_user_agent:
+      TargetFilename|contains|all:
+        - '/Users/'
+        - '.agent'
+    selection_launchdaemon:
+      TargetFilename|endswith: '/Library/LaunchDaemons/com.finder.helper.plist'
    condition: 1 of selection_*
 falsepositives:
     - Unknown