diff --git a/doc/source/getting-started-linux-tutorial.rst b/doc/source/getting-started-linux-tutorial.rst
index 031b49636..4c442c938 100644
--- a/doc/source/getting-started-linux-tutorial.rst
+++ b/doc/source/getting-started-linux-tutorial.rst
@@ -37,7 +37,7 @@ For plugin requests, please create an issue with a description of the requested
         banners.Banners     Attempts to identify potential linux banners in an
         linux.bash.Bash     Recovers bash command history from memory.
         linux.check_afinfo.Check_afinfo
-        linux.check_creds.Check_creds
+        linux.malware.check_creds.Check_creds
         linux.check_idt.Check_idt
 
 .. note:: Here the command is piped to grep and head to provide the start of the list of linux plugins.
diff --git a/test/plugins/linux/linux.py b/test/plugins/linux/linux.py
index e39c1d15d..abac11278 100644
--- a/test/plugins/linux/linux.py
+++ b/test/plugins/linux/linux.py
@@ -200,7 +200,7 @@ class TestLinuxCapabilities:
 class TestLinuxCheckCreds:
     def test_linux_generic_check_creds(self, image, volatility, python):
         rc, out, _err = test_volatility.runvol_plugin(
-            "linux.check_creds.Check_creds", image, volatility, python
+            "linux.malware.check_creds.Check_creds", image, volatility, python
         )
 
         # linux-sample-1.bin has no processes sharing credentials.