diff --git a/detections/endpoint/detect_activity_related_to_pass_the_hash_attacks.yml b/detections/deprecated/detect_activity_related_to_pass_the_hash_attacks.yml
similarity index 100%
rename from detections/endpoint/detect_activity_related_to_pass_the_hash_attacks.yml
rename to detections/deprecated/detect_activity_related_to_pass_the_hash_attacks.yml