diff --git a/detections/experimental/network/detect_dga_domains_using_pretrained_model_in_dsdl.yml b/detections/experimental/network/detect_dga_domains_using_pretrained_model_in_dsdl.yml
index 3052cc01d8..f620692684 100644
--- a/detections/experimental/network/detect_dga_domains_using_pretrained_model_in_dsdl.yml
+++ b/detections/experimental/network/detect_dga_domains_using_pretrained_model_in_dsdl.yml
@@ -26,8 +26,7 @@ references:
 - https://en.wikipedia.org/wiki/Domain_generation_algorithm
 tags:
   analytic_story:
-  - Data Protection
-  - Prohibited Traffic Allowed or Protocol Mismatch
+  - Data Exfiltration
   - DNS Hijacking
   - Suspicious DNS Traffic
   - Dynamic DNS
@@ -72,4 +71,4 @@ tags:
   - firstTime
   - lastTime
   risk_score: 63
-  security_domain: Network
\ No newline at end of file
+  security_domain: Network