It would be nice to edit preexisting file path rules. This is very useful when rule is added and then requires an immediate attention. Also, after parsing and merging the event log / advanced hunting rules if edit is needed - then an external tool has to be used (notepad). Then command line to compile/verify or policy has to be reopened in the wizard again.
It would be nice to edit preexisting file path rules. This is very useful when rule is added and then requires an immediate attention. Also, after parsing and merging the event log / advanced hunting rules if edit is needed - then an external tool has to be used (notepad). Then command line to compile/verify or policy has to be reopened in the wizard again.