diff --git a/threatmatch/machinetag.json b/threatmatch/machinetag.json
index 8e78ed1..1163a8e 100644
--- a/threatmatch/machinetag.json
+++ b/threatmatch/machinetag.json
@@ -1,7 +1,7 @@
 {
   "namespace": "threatmatch",
   "expanded": "ThreatMatch categories for sharing into ThreatMatch and MISP",
-  "version": 1,
+  "version": 2,
   "description": "The ThreatMatch Sectors, Incident types, Malware types and Alert types are applicable for any ThreatMatch instances and should be used for all CIISI and TIBER Projects.",
   "refs": [
     "https://www.secalliance.com/platform/",
@@ -176,7 +176,7 @@
       ]
     },
     {
-      "predicate": "incident_type",
+      "predicate": "incident-type",
       "entry": [
         {
           "value": "ATM Attacks",