diff --git a/rules/windows/powershell/powershell_script/posh_ps_susp_recon.yml b/rules/windows/powershell/powershell_script/posh_ps_susp_recon_export.yml
similarity index 100%
rename from rules/windows/powershell/powershell_script/posh_ps_susp_recon.yml
rename to rules/windows/powershell/powershell_script/posh_ps_susp_recon_export.yml