diff --git a/rules/windows/sysmon/sysmon_control_panel_item.yml b/rules/windows/sysmon/sysmon_control_panel_item.yml
index 850e6054b..6edabc77a 100644
--- a/rules/windows/sysmon/sysmon_control_panel_item.yml
+++ b/rules/windows/sysmon/sysmon_control_panel_item.yml
@@ -6,7 +6,7 @@ reference:
 tags: 
   - attack.execution
   - attack.t1196
-  - attack.defense_evation
+  - attack.defense_evasion
 author: Kyaw Min Thein
 date: 2019/08/27
 level: critical