diff --git a/detections/endpoint/windows_service_created_with_suspicious_service_name.yml b/detections/endpoint/windows_service_created_with_suspicious_service_name.yml
index e7567eb9bf..5d7eb02d53 100644
--- a/detections/endpoint/windows_service_created_with_suspicious_service_name.yml
+++ b/detections/endpoint/windows_service_created_with_suspicious_service_name.yml
@@ -64,7 +64,6 @@ tags:
   - Snake Malware
   asset_type: Endpoint
   mitre_attack_id: 
-  - T1569
   - T1569.002
   product: 
   - Splunk Enterprise