diff --git a/detections/endpoint/ssa___potential_pass_the_token_or_hash_observed_at_the_destination_device.yml b/detections/deprecated/ssa___potential_pass_the_token_or_hash_observed_at_the_destination_device.yml
similarity index 100%
rename from detections/endpoint/ssa___potential_pass_the_token_or_hash_observed_at_the_destination_device.yml
rename to detections/deprecated/ssa___potential_pass_the_token_or_hash_observed_at_the_destination_device.yml
diff --git a/detections/endpoint/ssa___potential_pass_the_token_or_hash_observed_by_an_event_collecting_device.yml b/detections/deprecated/ssa___potential_pass_the_token_or_hash_observed_by_an_event_collecting_device.yml
similarity index 100%
rename from detections/endpoint/ssa___potential_pass_the_token_or_hash_observed_by_an_event_collecting_device.yml
rename to detections/deprecated/ssa___potential_pass_the_token_or_hash_observed_by_an_event_collecting_device.yml
diff --git a/detections/endpoint/ssa___unusual_lolbas_in_short_period_of_time.yml b/detections/deprecated/ssa___unusual_lolbas_in_short_period_of_time.yml
similarity index 100%
rename from detections/endpoint/ssa___unusual_lolbas_in_short_period_of_time.yml
rename to detections/deprecated/ssa___unusual_lolbas_in_short_period_of_time.yml