diff --git a/detections/endpoint/rubeus_command_line_parameters.yml b/detections/endpoint/rubeus_command_line_parameters.yml
index b3117686de..49b18089a9 100644
--- a/detections/endpoint/rubeus_command_line_parameters.yml
+++ b/detections/endpoint/rubeus_command_line_parameters.yml
@@ -61,7 +61,7 @@ tags:
   risk_score: 36
   context:
   - Source:Endpoint
-  - Stage:PrivilegeEscalation
+  - Stage:Privilege Escalation
   message: Rubeus command line parameters were used on $dest$ 
   observable:
   - name: user
@@ -75,4 +75,4 @@ tags:
   - name: parent_process_name
     type: Parent Process
     role:
-    - Parent Process
\ No newline at end of file
+    - Parent Process