diff --git a/detections/experimental/ssa___disable_defender_antivirus_registry.yml b/detections/experimental/endpoint/ssa___disable_defender_antivirus_registry.yml
similarity index 100%
rename from detections/experimental/ssa___disable_defender_antivirus_registry.yml
rename to detections/experimental/endpoint/ssa___disable_defender_antivirus_registry.yml