FortiSIEM - Resources > Rules > Windows: DPAPI Domain Master Key Backup Attempt

[JohnCheong]

Hi,
Resources > Rules > Windows: DPAPI Domain Master Key Backup Attempt

Again newbie here, would like to ask in the above rules description got a broken link.
"https://github.com/SigmaHQ/sigma/blob/master/rules/windows/builtin/win_dpapi_domain_masterkey_backup... .. I would like to remove it .. but when i delete the link and click save, it save into a new copy .. 
Any way for me to remove that?

Thanks..

John-

[cdurkin_FTNT · Accepted solution]

Unfortunately any change to the description of a System out the box rule, will force the user to save the modified rule as a clone.

FYI: The correct reference for that rule is 

https://github.com/SigmaHQ/sigma/blob/master/rules/windows/builtin/security/win_security_dpapi_domai...