diff --git a/detections/endpoint/disabling_norun_windows_app.yml b/detections/endpoint/disabling_norun_windows_app.yml
index 2ae997fd35..b078b3d27a 100644
--- a/detections/endpoint/disabling_norun_windows_app.yml
+++ b/detections/endpoint/disabling_norun_windows_app.yml
@@ -1,7 +1,7 @@
 name: Disabling NoRun Windows App
 id: de81bc46-9213-11eb-adc9-acde48001122
-version: 1
-date: '2021-03-31'
+version: 2
+date: '2022-01-28'
 author: Teoderick Contreras, Splunk
 type: TTP
 datamodel: