diff --git a/handbook/queries/README.md b/handbook/queries/README.md
index f41719e063..9f724d2ac4 100644
--- a/handbook/queries/README.md
+++ b/handbook/queries/README.md
@@ -6,7 +6,7 @@ Fleet's standard query library includes a growing collection of useful queries f
 
 - [Detect machines with gatekeeper disabled](./detect-machines-with-gatekeeper-disabled.md)
 - [Detect presence of authorized SSH keys](./detect-presence-of-authorized-ssh-keys.md)
-- [Find hosts with the firewall disabled](./find-hosts-with-the-firewall-disabled.md)
+- [Detect hosts with the firewall disabled](./detect-hosts-with-the-firewall-disabled.md)
 - [Get installed Chrome extensions](./get-installed-chrome-extensions.md)
 - [Get installed FreeBSD software](./get-installed-freebsd-software.md)
 - [Get installed Homebrew packages](./get-installed-homebrew-packages.md)
diff --git a/handbook/queries/find-hosts-with-the-firewall-disabled.md b/handbook/queries/detect-hosts-with-the-firewall-disabled.md
similarity index 75%
rename from handbook/queries/find-hosts-with-the-firewall-disabled.md
rename to handbook/queries/detect-hosts-with-the-firewall-disabled.md
index f2f094158d..8166bed44c 100644
--- a/handbook/queries/find-hosts-with-the-firewall-disabled.md
+++ b/handbook/queries/detect-hosts-with-the-firewall-disabled.md
@@ -1,4 +1,4 @@
-# Find hosts with the firewall disabled
+# Detect hosts with the firewall disabled
 
 ### Platforms
 macOS