diff --git a/detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml b/detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml
index 3dba44623a..fdb0e2decb 100644
--- a/detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml
+++ b/detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml
@@ -55,8 +55,6 @@ rba:
   threat_objects:
   - field: parent_process_name
     type: parent_process_name
-  - field: process_name
-    type: process_name
 tags:
   analytic_story:
   - SnappyBee