diff --git a/src/python/strelka/scanners/scan_pe.py b/src/python/strelka/scanners/scan_pe.py
index 3b873f70..fa8dd84b 100644
--- a/src/python/strelka/scanners/scan_pe.py
+++ b/src/python/strelka/scanners/scan_pe.py
@@ -402,13 +402,13 @@ def scan(self, data, file, options, expire_at):
             return
 
         if rich_dict := parse_rich(pe):
-            if type(rich_dict) is str:
+            if type(rich_dict) is not str:
                 self.event["rich"] = rich_dict
             else:
                 self.flags.append(rich_dict)
 
         if cert_dict := parse_certificates(data):
-            if type(cert_dict) is str:
+            if type(cert_dict) is not str:
                 self.event["security"] = cert_dict
             else:
                 self.flags.append(cert_dict)