diff --git a/evtx/Maps/Microsoft-Windows-WMI-Activity-Operational_Microsoft-Windows-WMI-Activity_5860.map b/evtx/Maps/Microsoft-Windows-WMI-Activity-Operational_Microsoft-Windows-WMI-Activity_5860.map
index 84805c8d..6a92c47d 100644
--- a/evtx/Maps/Microsoft-Windows-WMI-Activity-Operational_Microsoft-Windows-WMI-Activity_5860.map
+++ b/evtx/Maps/Microsoft-Windows-WMI-Activity-Operational_Microsoft-Windows-WMI-Activity_5860.map
@@ -1,5 +1,5 @@
 Author: Eric Zimmerman saericzimmerman@gmail.com
-Description: Remote Desktop Services: Session logoff succeeded
+Description: "Remote Desktop Services: Session logoff succeeded"
 EventId: 5860
 Channel: WMI Registration of Temporary Event Consumer
 Provider: Microsoft-Windows-WMI-Activity