diff --git a/rules/microsoft-365/persistence_exchange_suspicious_mailbox_right_delegation.toml b/rules/integrations/o365/persistence_exchange_suspicious_mailbox_right_delegation.toml
similarity index 100%
rename from rules/microsoft-365/persistence_exchange_suspicious_mailbox_right_delegation.toml
rename to rules/integrations/o365/persistence_exchange_suspicious_mailbox_right_delegation.toml
diff --git a/rules/okta/initial_access_okta_user_attempted_unauthorized_access.toml b/rules/integrations/okta/initial_access_okta_user_attempted_unauthorized_access.toml
similarity index 100%
rename from rules/okta/initial_access_okta_user_attempted_unauthorized_access.toml
rename to rules/integrations/okta/initial_access_okta_user_attempted_unauthorized_access.toml