diff --git a/rules-deprecated/windows/proc_creation_win_susp_cmd_exectution_via_wmi.yml b/rules-deprecated/windows/proc_creation_win_susp_cmd_exectution_via_wmi.yml
index f11744720..33f9a3290 100644
--- a/rules-deprecated/windows/proc_creation_win_susp_cmd_exectution_via_wmi.yml
+++ b/rules-deprecated/windows/proc_creation_win_susp_cmd_exectution_via_wmi.yml
@@ -6,6 +6,7 @@ references:
     - https://www.elastic.co/guide/en/security/current/suspicious-cmd-execution-via-wmi.html
 author: Tim Rauch
 date: 2022/09/27
+modified: 2023/01/19
 tags:
     - attack.execution
     - attack.t1047