diff --git a/nursery/execute-shell-command-via-windows-remote-management.yml b/nursery/execute-shell-command-via-windows-remote-management.yml
index b5281be3..4fed57d0 100644
--- a/nursery/execute-shell-command-via-windows-remote-management.yml
+++ b/nursery/execute-shell-command-via-windows-remote-management.yml
@@ -7,7 +7,7 @@ rule:
       - michael.hunhoff@mandiant.com
     scopes:
       static: function
-      dynamic: thread
+      dynamic: call
   features:
     - and:
       - or: