diff --git a/rules/windows/process_creation/process_creation_copying_sensitive_files_with_credential_data.yml b/rules/windows/process_creation/win_copying_sensitive_files_with_credential_data.yml
similarity index 100%
rename from rules/windows/process_creation/process_creation_copying_sensitive_files_with_credential_data.yml
rename to rules/windows/process_creation/win_copying_sensitive_files_with_credential_data.yml
diff --git a/rules/windows/process_creation/process_creation_grabbing_sensitive_hives_via_reg.yml b/rules/windows/process_creation/win_grabbing_sensitive_hives_via_reg.yml
similarity index 100%
rename from rules/windows/process_creation/process_creation_grabbing_sensitive_hives_via_reg.yml
rename to rules/windows/process_creation/win_grabbing_sensitive_hives_via_reg.yml
diff --git a/rules/windows/process_creation/process_creation_mimikatz_command_line.yml b/rules/windows/process_creation/win_mimikatz_command_line.yml
similarity index 100%
rename from rules/windows/process_creation/process_creation_mimikatz_command_line.yml
rename to rules/windows/process_creation/win_mimikatz_command_line.yml
diff --git a/rules/windows/process_creation/process_creation_shadow_copies_access_symlink.yml b/rules/windows/process_creation/win_shadow_copies_access_symlink.yml
similarity index 100%
rename from rules/windows/process_creation/process_creation_shadow_copies_access_symlink.yml
rename to rules/windows/process_creation/win_shadow_copies_access_symlink.yml
diff --git a/rules/windows/process_creation/process_creation_shadow_copies_creation.yml b/rules/windows/process_creation/win_shadow_copies_creation.yml
similarity index 100%
rename from rules/windows/process_creation/process_creation_shadow_copies_creation.yml
rename to rules/windows/process_creation/win_shadow_copies_creation.yml
diff --git a/rules/windows/process_creation/process_creation_shadow_copies_deletion.yml b/rules/windows/process_creation/win_shadow_copies_deletion.yml
similarity index 100%
rename from rules/windows/process_creation/process_creation_shadow_copies_deletion.yml
rename to rules/windows/process_creation/win_shadow_copies_deletion.yml
diff --git a/rules/windows/process_creation/process_creation_susp_process_creations.yml b/rules/windows/process_creation/win_susp_process_creations.yml
similarity index 100%
rename from rules/windows/process_creation/process_creation_susp_process_creations.yml
rename to rules/windows/process_creation/win_susp_process_creations.yml