diff --git a/rules/windows/builtin/security/win_pass_the_hash.yml b/rules-placeholder/windows/builtin/security/win_pass_the_hash.yml
similarity index 100%
rename from rules/windows/builtin/security/win_pass_the_hash.yml
rename to rules-placeholder/windows/builtin/security/win_pass_the_hash.yml
diff --git a/rules/windows/builtin/security/win_privesc_cve_2020_1472.yml b/rules-placeholder/windows/builtin/security/win_privesc_cve_2020_1472.yml
similarity index 100%
rename from rules/windows/builtin/security/win_privesc_cve_2020_1472.yml
rename to rules-placeholder/windows/builtin/security/win_privesc_cve_2020_1472.yml
diff --git a/rules/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml b/rules-placeholder/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml
similarity index 100%
rename from rules/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml
rename to rules-placeholder/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml
diff --git a/rules/windows/builtin/security/win_susp_interactive_logons.yml b/rules-placeholder/windows/builtin/security/win_susp_interactive_logons.yml
similarity index 100%
rename from rules/windows/builtin/security/win_susp_interactive_logons.yml
rename to rules-placeholder/windows/builtin/security/win_susp_interactive_logons.yml