Should we move the "other" into "builtin" folder?

[Neo23x0]

Hey guys,

shouldn't we move the folder rules/windows/other to rules/windows/builtin/other as it contains only log sources that are builtin in Windows, like the Print Service or Windows Defender.

@frack113 @thomaspatzke

[frack113]

Yes
Why not move msexchange to application as you need to install it ?
Other are builtin channel to enable.

[Neo23x0]

MS Exchange should appear under /Microsoft/Windows
I would handle it as builtin. I consider application as 3rd party applications that are not part of the OS.
But this is not a strong opinion. If everybody else thinks differently, I can align with that.

[frack113]

Let's start with a simple rule:

• events below "windows" in windows folder
• the others in "application" folder

[thomaspatzke]

Yes!