diff --git a/detections/endpoint/disable_etw_through_registry.yml b/detections/endpoint/disable_etw_through_registry.yml
index 78ce481563..92778aa40a 100644
--- a/detections/endpoint/disable_etw_through_registry.yml
+++ b/detections/endpoint/disable_etw_through_registry.yml
@@ -1,7 +1,7 @@
 name: Disable ETW Through Registry
 id: f0eacfa4-d33f-11eb-8f9d-acde48001122
-version: 1
-date: '2021-06-22'
+version: 2
+date: '2022-01-27'
 author: Teoderick Contreras, Splunk
 type: TTP
 datamodel: