diff --git a/detections/endpoint/windows_indirect_command_execution_via_pcalua.yml b/detections/endpoint/windows_indirect_command_execution_via_pcalua.yml
index 44cf06eb3b..d9246caf27 100644
--- a/detections/endpoint/windows_indirect_command_execution_via_pcalua.yml
+++ b/detections/endpoint/windows_indirect_command_execution_via_pcalua.yml
@@ -1,5 +1,5 @@
 name: Windows Indirect Command Execution Via pcalua
-id: 59e54602-9680-11ec-a8a6-aaaaaaaaaaaa
+id: 3428ac18-a410-4823-816c-ce697d26f7a8
 version: 1
 date: '2022-04-05'
 author: Eric McGinnis, Splunk