Software Management Group

Hi, did you ever try to delete a detection rule ? I share this item I built long time ago, and need today :)

Just import the XML below in a report area your console.

This query can be useful for detection rules but also other kind of items, just replace the '3CC607F3-C0E4-445B-A7B6-0D1FA4CA1EAA' with the Class Guid the Item type you want: more 1600 class I think :)

Here the simple SQL, but all the same short, such SQL can be hard to build, when don't know ;-)

/*pascal KOTTE 2010-06-01*/
SELECT     vItem.Name, vItem.Description, vItem_2.Name AS 'Child name', vItem.Guid as '_ItemGuid'
FROM         vItem FULL OUTER JOIN
                      vItem AS vItem_2 INNER JOIN
                      ResourceAssociation AS child ON vItem_2.Guid = child.ChildResourceGuid ON vItem.Guid = child.ChildResourceGuid
WHERE     (vItem.ClassGuid = '3CC607F3-C0E4-445B-A7B6-0D1FA4CA1EAA')
ORDER BY 'Child name'