diff --git a/rules/windows/process_creation/proc_creation_win_lolbas_execution_of_wuauclt.yml b/rules/windows/process_creation/proc_creation_win_lolbas_execution_of_wuauclt.yml
index bae3fad54..5e00849c5 100644
--- a/rules/windows/process_creation/proc_creation_win_lolbas_execution_of_wuauclt.yml
+++ b/rules/windows/process_creation/proc_creation_win_lolbas_execution_of_wuauclt.yml
@@ -29,4 +29,4 @@ level: medium
 tags:
     - attack.defense_evasion
     - attack.execution
-    - attack.t1218.011
+    - attack.t1218