diff --git a/detections/endpoint/detection_of_tools_built_by_nirsoft.yml b/detections/deprecated/detection_of_tools_built_by_nirsoft.yml
similarity index 100%
rename from detections/endpoint/detection_of_tools_built_by_nirsoft.yml
rename to detections/deprecated/detection_of_tools_built_by_nirsoft.yml
diff --git a/detections/endpoint/detect_windows_dns_sigred_via_splunk_stream.yml b/detections/network/detect_windows_dns_sigred_via_splunk_stream.yml
similarity index 100%
rename from detections/endpoint/detect_windows_dns_sigred_via_splunk_stream.yml
rename to detections/network/detect_windows_dns_sigred_via_splunk_stream.yml
diff --git a/detections/endpoint/detect_windows_dns_sigred_via_zeek.yml b/detections/network/detect_windows_dns_sigred_via_zeek.yml
similarity index 100%
rename from detections/endpoint/detect_windows_dns_sigred_via_zeek.yml
rename to detections/network/detect_windows_dns_sigred_via_zeek.yml