diff --git a/rules/windows/privilege_escalation_krbrelayup_suspicious_logon.toml b/rules/_deprecated/privilege_escalation_krbrelayup_suspicious_logon.toml
similarity index 96%
rename from rules/windows/privilege_escalation_krbrelayup_suspicious_logon.toml
rename to rules/_deprecated/privilege_escalation_krbrelayup_suspicious_logon.toml
index 7c1738470..8301e787f 100644
--- a/rules/windows/privilege_escalation_krbrelayup_suspicious_logon.toml
+++ b/rules/_deprecated/privilege_escalation_krbrelayup_suspicious_logon.toml
@@ -1,7 +1,8 @@
 [metadata]
 creation_date = "2022/04/26"
-maturity = "production"
-updated_date = "2022/04/26"
+deprecation_date = "2022/08/01"
+maturity = "deprecated"
+updated_date = "2022/08/01"
 
 [rule]
 author = ["Elastic"]