diff --git a/rules/windows/builtin/win_susp_dhcp_config_failed.yml b/rules/windows/builtin/win_susp_dhcp_config_failed.yml
index 4e08f1f9a..527857d15 100644
--- a/rules/windows/builtin/win_susp_dhcp_config_failed.yml
+++ b/rules/windows/builtin/win_susp_dhcp_config_failed.yml
@@ -19,6 +19,7 @@ detection:
             - 1031
             - 1032
             - 1034
+        Source: Microsoft-Windows-DHCP-Server            
     condition: selection
 falsepositives: 
     - Unknown