diff --git a/rules/integrations/endpoint/elastic_endpoint_security_behavior_detected.toml b/rules/integrations/endpoint/elastic_endpoint_security_behavior_detected.toml
index 655e09eeb41..3ffad5b1492 100644
--- a/rules/integrations/endpoint/elastic_endpoint_security_behavior_detected.toml
+++ b/rules/integrations/endpoint/elastic_endpoint_security_behavior_detected.toml
@@ -2,7 +2,7 @@
 creation_date = "2024/03/24"
 integration = ["endpoint"]
 maturity = "production"
-min_stack_comments = "New fields added: required_fields, related_integrations, setup"
+min_stack_comments = "Defend alerting adjustments patch to distinguish prevention and detection."
 min_stack_version = "8.16.0"
 promotion = true
 updated_date = "2024/11/26"