diff --git a/rules/windows/file_access/file_access_win_credential_manager_stealing.yml b/rules/windows/file/file_access/file_access_win_credential_manager_stealing.yml
similarity index 100%
rename from rules/windows/file_access/file_access_win_credential_manager_stealing.yml
rename to rules/windows/file/file_access/file_access_win_credential_manager_stealing.yml