diff --git a/rules/network/net_dns_c2_detection.yml b/rules/network/net_dns_c2_detection.yml
index 057b30da..bed84c6d 100644
--- a/rules/network/net_dns_c2_detection.yml
+++ b/rules/network/net_dns_c2_detection.yml
@@ -16,5 +16,4 @@ falsepositives:
     - Valid software, which uses dns for transferring data
 level: high
 tags:
-    - attack.c2
     - attack.t1043