diff --git a/rules/windows/network_connection/net_connection_win_domain_cloudflared_communication.yml b/rules/windows/network_connection/net_connection_win_domain_cloudflared_communication.yml
index 36df578c3..30b9c301c 100644
--- a/rules/windows/network_connection/net_connection_win_domain_cloudflared_communication.yml
+++ b/rules/windows/network_connection/net_connection_win_domain_cloudflared_communication.yml
@@ -16,7 +16,8 @@ date: 2024-05-27
 tags:
     - attack.exfiltration
     - attack.command-and-control
-    - attack.t1567.001
+    - attack.t1567
+    - attack.t1572
 logsource:
     category: network_connection
     product: windows