diff --git a/windows/security/TOC.yml b/windows/security/TOC.yml
index 8a7d808e9b..3c93924299 100644
--- a/windows/security/TOC.yml
+++ b/windows/security/TOC.yml
@@ -230,12 +230,12 @@
    - name: Microsoft Defender Application Guard
      href: threat-protection\microsoft-defender-application-guard\md-app-guard-overview.md
    - name: Windows Sandbox
-     href: windows-sandbox/windows-sandbox-overview.md
+     href: threat-protection/windows-sandbox/windows-sandbox-overview.md
      items: 
         - name: Windows Sandbox architecture
-          href: windows-sandbox/windows-sandbox-architecture.md
+          href: threat-protection/windows-sandbox/windows-sandbox-architecture.md
         - name: Windows Sandbox configuration
-          href: windows-sandbox/windows-sandbox-configure-using-wsb-file.md
+          href: threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-file.md
    - name: Microsoft Defender SmartScreen overview
      href: threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md
    - name: Configure S/MIME for Windows