diff --git a/fim-fs17101.xml b/fim-fs17101.xml
index aa91d9b..1a5bf63 100644
--- a/fim-fs17101.xml
+++ b/fim-fs17101.xml
@@ -2,13 +2,13 @@
 
 
 <!-- Filtre accès objet win - Supression/modif/créa -->
-<!-- <group name="windows,windows_security,">
+<group name="windows,windows_security,">
   <rule id="100100" level="0">
     <if_sid>60103</if_sid>
-    <field type=pcre2 name="win.system.eventID">(4663|4659)</field>
+    <field type="pcre2" name="win.system.eventID">(4663|4659)</field>
     <description>Alerte fichier modifié</description>
   </rule>
-</group> -->
+</group>
 
 <!-- Règle alerte lors de la modification d'un fichier -->
 <group name="windows,windows_security,">