diff --git a/detections/experimental/network/ssl_certificates_with_punycode.yml b/detections/experimental/network/ssl_certificates_with_punycode.yml
index 9d89ada1e2..187241d58c 100644
--- a/detections/experimental/network/ssl_certificates_with_punycode.yml
+++ b/detections/experimental/network/ssl_certificates_with_punycode.yml
@@ -34,7 +34,7 @@ tags:
   - CIS 16
   confidence: 30
   context:
-  - Network
+  - Source:IPS
   dataset: []
   impact: 50
   kill_chain_phases:
diff --git a/detections/experimental/network/zeek_x509_certificate_with_punycode.yml b/detections/experimental/network/zeek_x509_certificate_with_punycode.yml
index cdf2267d75..36dee9950c 100644
--- a/detections/experimental/network/zeek_x509_certificate_with_punycode.yml
+++ b/detections/experimental/network/zeek_x509_certificate_with_punycode.yml
@@ -32,7 +32,7 @@ tags:
   - CIS 16
   confidence: 30
   context:
-  - Network
+  - Source:IPS
   dataset: []
   impact: 50
   kill_chain_phases: