diff --git a/clusters/tmss.json b/clusters/tmss.json
index bdad626..541f75d 100644
--- a/clusters/tmss.json
+++ b/clusters/tmss.json
@@ -202,8 +202,8 @@
       "meta": {
         "external_id": "MS-T840",
         "kill_chain": [
-          "TMSS-tactics:Initial Access",
-          "TMSS-tactics:Exfiltration"
+          "TMSS-tactics:Exfiltration",
+          "TMSS-tactics:Initial Access"
         ],
         "refs": [
           "https://microsoft.github.io/Threat-matrix-for-storage-services/techniques/object-replication"
@@ -223,8 +223,8 @@
       "meta": {
         "external_id": "MS-T813",
         "kill_chain": [
-          "TMSS-tactics:Persistence",
-          "TMSS-tactics:Defense Evasion"
+          "TMSS-tactics:Defense Evasion",
+          "TMSS-tactics:Persistence"
         ],
         "refs": [
           "https://microsoft.github.io/Threat-matrix-for-storage-services/techniques/firewall-configuration-changes"
@@ -238,8 +238,8 @@
       "meta": {
         "external_id": "MS-T808",
         "kill_chain": [
-          "TMSS-tactics:Persistence",
-          "TMSS-tactics:Defense Evasion"
+          "TMSS-tactics:Defense Evasion",
+          "TMSS-tactics:Persistence"
         ],
         "refs": [
           "https://microsoft.github.io/Threat-matrix-for-storage-services/techniques/rbac-permission"
@@ -323,8 +323,8 @@
       "meta": {
         "external_id": "MS-T812",
         "kill_chain": [
-          "TMSS-tactics:Persistence",
-          "TMSS-tactics:Defense Evasion"
+          "TMSS-tactics:Defense Evasion",
+          "TMSS-tactics:Persistence"
         ],
         "refs": [
           "https://microsoft.github.io/Threat-matrix-for-storage-services/techniques/private-endpoint"