diff --git a/docs/management/admin/allowlist-endpoint-3rd-party-av.asciidoc b/docs/management/admin/allowlist-endpoint-3rd-party-av.asciidoc
index e4dd3f47a1..383620e569 100644
--- a/docs/management/admin/allowlist-endpoint-3rd-party-av.asciidoc
+++ b/docs/management/admin/allowlist-endpoint-3rd-party-av.asciidoc
@@ -13,8 +13,8 @@ NOTE: Your AV software may refer to allowlisted processes as process exclusions,
 
 File paths:
 
-* ELAM driver: `c:\Windows\system32\drivers\elastic-endpoint-driver.sys`
-* Driver: `c:\Windows\system32\drivers\ElasticElam.sys`
+* ELAM driver: `c:\Windows\system32\drivers\ElasticElam.sys`
+* Driver: `c:\Windows\system32\drivers\elastic-endpoint-driver.sys`
 * Executable: `c:\Program Files\Elastic\Endpoint\elastic-endpoint.exe`
 +
 NOTE: The executable runs as `elastic-endpoint.exe`.
@@ -53,4 +53,4 @@ File path:
 
 * Executable: `/opt/Elastic/Endpoint/elastic-endpoint`
 +
-NOTE: The executable runs as `elastic-endpoint`.
\ No newline at end of file
+NOTE: The executable runs as `elastic-endpoint`.