diff --git a/rules/windows/process_creation/Monitor_WMI_Win32_Process Create_command_execution_by_Office_Applications.yml b/rules/windows/process_creation/process_creation_command_execution_by_office_applications.yml similarity index 100% rename from rules/windows/process_creation/Monitor_WMI_Win32_Process Create_command_execution_by_Office_Applications.yml rename to rules/windows/process_creation/process_creation_command_execution_by_office_applications.yml