diff --git a/detections/endpoint/suspicious_process_file_path.yml b/detections/endpoint/suspicious_process_file_path.yml
index 03fc872956..4c86863b05 100644
--- a/detections/endpoint/suspicious_process_file_path.yml
+++ b/detections/endpoint/suspicious_process_file_path.yml
@@ -52,6 +52,7 @@ tags:
   - Chaos Ransomware
   - LockBit Ransomware
   - AsyncRAT
+  - Swift Slicer
   automated_detection_testing: passed
   confidence: 50
   context: