From c46a33d9fb94c1a9de4001fd851f248415e096f1 Mon Sep 17 00:00:00 2001
From: arthur <arthur@wazuh.ccicm.lan>
Date: Wed, 11 Feb 2026 16:57:06 +0100
Subject: [PATCH] rev erreur xml pcre2

---
 fim-fs17101.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/fim-fs17101.xml b/fim-fs17101.xml
index aa91d9b..1a5bf63 100644
--- a/fim-fs17101.xml
+++ b/fim-fs17101.xml
@@ -2,13 +2,13 @@
 
 
 <!-- Filtre accès objet win - Supression/modif/créa -->
-<!-- <group name="windows,windows_security,">
+<group name="windows,windows_security,">
   <rule id="100100" level="0">
     <if_sid>60103</if_sid>
-    <field type=pcre2 name="win.system.eventID">(4663|4659)</field>
+    <field type="pcre2" name="win.system.eventID">(4663|4659)</field>
     <description>Alerte fichier modifié</description>
   </rule>
-</group> -->
+</group>
 
 <!-- Règle alerte lors de la modification d'un fichier -->
 <group name="windows,windows_security,">