l.bourdin
/
Wazuh-Custom-rules
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

rev erreur xml pcre2

This commit is contained in:
arthur 2026-02-11 16:57:06 +01:00
parent 25ed65fd8a
commit c46a33d9fb
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
fim-fs17101.xml
View File

@ -2,13 +2,13 @@
<!-- Filtre accès objet win - Supression/modif/créa -->
<!-- <group name="windows,windows_security,">
<group name="windows,windows_security,">
<rule id="100100" level="0">
<if_sid>60103</if_sid>
<field type=pcre2 name="win.system.eventID">(4663|4659)</field>
<field type="pcre2" name="win.system.eventID">(4663|4659)</field>
<description>Alerte fichier modifié</description>
</rule>
</group> -->
</group>
<!-- Règle alerte lors de la modification d'un fichier -->
<group name="windows,windows_security,">