diff --git a/anti-analysis/anti-vm/vm-detection/check-for-microsoft-office-emulation.yml b/anti-analysis/anti-vm/vm-detection/check-for-microsoft-office-emulation.yml
index 2c37d6a1..c2b69506 100644
--- a/anti-analysis/anti-vm/vm-detection/check-for-microsoft-office-emulation.yml
+++ b/anti-analysis/anti-vm/vm-detection/check-for-microsoft-office-emulation.yml
@@ -7,7 +7,7 @@ rule:
     att&ck:
       - Defense Evasion::Virtualization/Sandbox Evasion::System Checks [T1497.001]
     mbc:
-      - Anti-Behavioral Analysis::Virtual Machine Detection::Product Key/ID Testing [B0007.005]
+      - Anti-Behavioral Analysis::Sandbox Detection::Product Key/ID Testing [B0007.005]
     references:
       - https://github.com/LloydLabs/wsb-detect
     examples:
diff --git a/anti-analysis/packer/gopacker/packed-with-gopacker.yml b/anti-analysis/packer/gopacker/packed-with-gopacker.yml
index d5cf08f6..c145329d 100644
--- a/anti-analysis/packer/gopacker/packed-with-gopacker.yml
+++ b/anti-analysis/packer/gopacker/packed-with-gopacker.yml
@@ -8,7 +8,7 @@ rule:
     att&ck:
       - Defense Evasion::Obfuscated Files or Information::Software Packing [T1027.002]
     mbc:
-      - Anti-Static Analysis::Software Packing::Standard Compression [OB0002.F0001.002]
+      - Anti-Static Analysis::Software Packing::Standard Compression [F0001.002]
     references:
       - https://github.com/nirhaas/gopacker
     examples:
diff --git a/anti-analysis/reference-analysis-tools-strings.yml b/anti-analysis/reference-analysis-tools-strings.yml
index 399789d5..b43f5620 100644
--- a/anti-analysis/reference-analysis-tools-strings.yml
+++ b/anti-analysis/reference-analysis-tools-strings.yml
@@ -5,7 +5,7 @@ rule:
     author: michael.hunhoff@mandiant.com
     scope: file
     mbc:
-      - Discovery::Analysis Tool Discovery::Process Detection [B0013.001]
+      - Discovery::Analysis Tool Discovery::Process detection [B0013.001]
     references:
       - https://github.com/LordNoteworthy/al-khaser/blob/master/al-khaser/AntiAnalysis/process.cpp
     examples:
diff --git a/host-interaction/process/dump/create-process-memory-minidump.yml b/host-interaction/process/dump/create-process-memory-minidump.yml
index e4a1f226..e361d4d1 100644
--- a/host-interaction/process/dump/create-process-memory-minidump.yml
+++ b/host-interaction/process/dump/create-process-memory-minidump.yml
@@ -6,7 +6,7 @@ rule:
     author: michael.hunhoff@mandiant.com
     scope: basic block
     mbc:
-      - File System::Write File [C0052]
+      - File System::Writes File [C0052]
     examples:
       - 91a12a4cf437589ba70b1687f5acad19:0x43E1C9
   features:
diff --git a/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml b/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml
index ac326dff..ba9a581f 100644
--- a/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml
+++ b/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml
@@ -8,7 +8,7 @@ rule:
       - Impact::Inhibit System Recovery [T1490]
       - Defense Evasion::Indicator Removal on Host::File Deletion [T1070.004]
     mbc:
-      - Impact::Disk Content Wipe::Delete Shadow Drive [F0014.001]
+      - Impact::Data Destruction::Delete Shadow Copies [E1485.m04]
     examples:
       - B87E9DD18A5533A09D3E48A7A1EFBCF6:0x140006AF0
   features:
diff --git a/load-code/pe/rebuild-import-table.yml b/load-code/pe/rebuild-import-table.yml
index 124ad1bb..c0c9c99c 100644
--- a/load-code/pe/rebuild-import-table.yml
+++ b/load-code/pe/rebuild-import-table.yml
@@ -5,7 +5,7 @@ rule:
     author: "@Ana06"
     scope: function
     mbc:
-      - Defense Evasion::Hijack Execution Flow::Import Address Table (IAT) Hooking [F0005.m03]
+      - Defense Evasion::Hijack Execution Flow::Import Address Table (IAT) Hooking [F0015.003]
     references:
       - https://0x00sec.org/t/reflective-dll-injection/3080
       - https://www.ired.team/offensive-security/code-injection-process-injection/reflective-dll-injection