diff --git a/detections/endpoint/windows_drivers_loaded_by_signature.yml b/detections/endpoint/windows_drivers_loaded_by_signature.yml
index 7ee603a4b1..744bcfb830 100644
--- a/detections/endpoint/windows_drivers_loaded_by_signature.yml
+++ b/detections/endpoint/windows_drivers_loaded_by_signature.yml
@@ -24,7 +24,7 @@ references:
   - https://www.fuzzysecurity.com/tutorials/28.html
 tags:
   analytic_story:
-  - Windows Rootkits
+  - Windows Drivers
   cis20:
   - CIS 3
   - CIS 5