diff --git a/README.md b/README.md
index df8e5b4..6325e76 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ All data here is **metadata only**. No raw logs, PCAPs, or sensitive artifacts a
 ## Intended Use
 - Ingest `iocs.csv` into monitoring tooling, SIEM rules, DNS tracking, or threat-hunting routines.  
 - Apply `blocklist.csv` for defensive blocking or sinkholing.  
-- Consult `key_hits.txt` to track behaviors or patterns: shell anomalies, proxy/tunnel strings, beacon pulses.
+- Consult `key hits.txt` to track behaviors or patterns: shell anomalies, proxy/tunnel strings, beacon pulses.