*<match>Windows Installer</match> with another event ID * <group name="Install_MSI"> <rule id="100007" level="7"> <if_sid>18101</if_sid> * <match>Windows Installer</match>* <description>Detected Software Install</description> </rule> </group>
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
