diff --git a/misp/machinetag.json b/misp/machinetag.json
index 2fef916..51010fa 100755
--- a/misp/machinetag.json
+++ b/misp/machinetag.json
@@ -36,15 +36,6 @@
         }
       ]
     },
-    {
-      "predicate": "tool",
-      "entry": [
-        {
-          "expanded": "misp2stix",
-          "value": "misp2stix"
-        }
-      ]
-    },
     {
       "predicate": "confidence-level",
       "entry": [
@@ -107,6 +98,15 @@
           "description": "High risk which can include highly sophisticated attacks or 0-day attack. (CEUS threat level)"
         }
       ]
+    },
+    {
+      "predicate": "tool",
+      "entry": [
+        {
+          "expanded": "misp2stix",
+          "value": "misp2stix"
+        }
+      ]
     }
   ],
   "predicates": [