diff --git a/rules/windows/defense_evasion_code_injection_conhost.toml b/rules/_deprecated/defense_evasion_code_injection_conhost.toml
similarity index 98%
rename from rules/windows/defense_evasion_code_injection_conhost.toml
rename to rules/_deprecated/defense_evasion_code_injection_conhost.toml
index 94157ed4c..816c14e53 100644
--- a/rules/windows/defense_evasion_code_injection_conhost.toml
+++ b/rules/_deprecated/defense_evasion_code_injection_conhost.toml
@@ -1,7 +1,8 @@
 [metadata]
 creation_date = "2020/08/31"
-maturity = "production"
-updated_date = "2022/05/21"
+deprecation_date = "2022/08/03"
+maturity = "deprecated"
+updated_date = "2022/08/03"
 
 [rule]
 author = ["Elastic"]