diff --git a/datasets/attack_techniques/T1566.002/atomic_red_team/atomic_red_team.yml b/datasets/attack_techniques/T1566.002/atomic_red_team/atomic_red_team.yml
index 1ae18a25..5f55eef1 100644
--- a/datasets/attack_techniques/T1566.002/atomic_red_team/atomic_red_team.yml
+++ b/datasets/attack_techniques/T1566.002/atomic_red_team/atomic_red_team.yml
@@ -6,7 +6,7 @@ description: Evilginx2 DNS activity captured by Stream. Custom attack_range conf
   which was running Stream and resolving DNS via DC.
 environment: attack_range_evilginx2
 dataset:
-- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1566.002/atomic_red_team/attack_data_stream:dns.json
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1566.002/atomic_red_team/attack_data_stream_dns.json
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1566.002/atomic_red_team/attack_data_network_resolution_dm.json
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1566.002/atomic_red_team/windows-security.log
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1566.002/atomic_red_team/windows-sysmon.log
diff --git a/datasets/attack_techniques/T1566.002/atomic_red_team/attack_data_stream:dns.json b/datasets/attack_techniques/T1566.002/atomic_red_team/attack_data_stream_dns.json
similarity index 100%
rename from datasets/attack_techniques/T1566.002/atomic_red_team/attack_data_stream:dns.json
rename to datasets/attack_techniques/T1566.002/atomic_red_team/attack_data_stream_dns.json