diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md
index 79225d5dd1..4f23cc6691 100644
--- a/windows/security/threat-protection/TOC.md
+++ b/windows/security/threat-protection/TOC.md
@@ -302,7 +302,7 @@
  
 #### [Devices list]()
 ##### [View and organize the Devices list](microsoft-defender-atp/machines-view-overview.md)
-##### [Device timeline event flags](device-timeline-event-flag.md)
+##### [Device timeline event flags](microsoft-defender-atp/device-timeline-event-flag.md)
 ##### [Manage device group and tags](microsoft-defender-atp/machine-tags.md)
  
 #### [Take response actions]()