double space before " -Option"

Rule UUID

96cd126d-f970-49c4-848a-da3a09f55c55

Example EventLog

      "activity_id": "{8877f58f-387a-0002-b48e-87887a38dd01}",
      "event_id": "4104",
      "event_data": {
        "ScriptBlockText": "Set-Alias -Name ncim -Value New-CimInstance  -Option ReadOnly, AllScope -ErrorAction SilentlyContinue",
        "MessageTotal": "1",
        "ScriptBlockId": "c3850902-4e6c-4271-9cbd-9fd5dbc3536d",
        "MessageNumber": "1"
      },

Description

for example the rule contains the following pattern: "Set-Alias -Name ncim -Value New-CimInstance -Option ReadOnly, AllScope -ErrorAction SilentlyContinue"

but the windows send the following log: "Set-Alias -Name ncim -Value New-CimInstance -Option ReadOnly, AllScope -ErrorAction SilentlyContinue"

the differences only one +space in the log...