diff --git a/detections/endpoint/wmic_noninteractive_app_uninstallation.yml b/detections/endpoint/wmic_noninteractive_app_uninstallation.yml
index adf2b02eaf..3f6a4272ff 100644
--- a/detections/endpoint/wmic_noninteractive_app_uninstallation.yml
+++ b/detections/endpoint/wmic_noninteractive_app_uninstallation.yml
@@ -31,6 +31,7 @@ references:
 tags:
   analytic_story:
   - IceID
+  - Azorult
   confidence: 50
   context:
   - Source:Endpoint