diff --git a/rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml b/rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml
index fe216e591..cea5c5ba8 100644
--- a/rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml
+++ b/rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml
@@ -5,9 +5,9 @@ references:
     - https://www.fireeye.com/blog/threat-research/2017/05/fin7-shim-databases-persistence.html
 tags:
     - attack.persistence
-    - attack.T1138
+    - attack.t1138
 author: Markus Neis
-date: 2018/03/08
+date: 2018-08-03
 logsource:
     product: windows
     service: sysmon