diff --git a/rules/windows/process_creation/proc_creation_win_adplus_memory_dump.yml b/rules/windows/process_creation/proc_creation_win_adplus_memory_dump.yml
index 6111dab76..5f21e01d0 100644
--- a/rules/windows/process_creation/proc_creation_win_adplus_memory_dump.yml
+++ b/rules/windows/process_creation/proc_creation_win_adplus_memory_dump.yml
@@ -12,6 +12,7 @@ modified: 2023-06-23
 tags:
     - attack.defense-evasion
     - attack.execution
+    - attack.credential-access
     - attack.t1003.001
 logsource:
     category: process_creation