diff --git a/README.md b/README.md
index b885d9c..a860775 100644
--- a/README.md
+++ b/README.md
@@ -19,6 +19,7 @@ This project aims to document SentinelOne Deep Visibility queries for detecting
 
 [Impact](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/Tactics/Impact.md)
 
+[Exfiltration](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/Tactics/Exfiltration.md)
 
 
 ## Tactics (IN PROGRESS)
@@ -31,6 +32,4 @@ This project aims to document SentinelOne Deep Visibility queries for detecting
 
 [Collection](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/Tactics/Collection.md)
 
-[Exfiltration](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/Tactics/Exfiltration.md)
-
 [Credential Access](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/Tactics/CredentialAccess.md)
\ No newline at end of file