diff --git a/nursery/search-for-file-via-winapi.yml b/nursery/search-for-file-via-winapi.yml
new file mode 100644
index 000000000..db3f686bb
--- /dev/null
+++ b/nursery/search-for-file-via-winapi.yml
@@ -0,0 +1,14 @@
+rule:
+  meta:
+    name: search for file via WinAPI
+    namespace: host-interaction/file-system
+    authors:
+      - "@w3lld1"
+    scopes:
+      static: instruction
+      dynamic: call
+    att&ck:
+      - Discovery::File and Directory Discovery [T1083]
+  features:
+    - or:
+      - api: SearchPath