From 8aaadcc48de8a553f51d4bd631ef129cce5dc67b Mon Sep 17 00:00:00 2001
From: sro-nviso <110816430+sro-nviso@users.noreply.github.com>
Date: Fri, 19 May 2023 11:16:47 +0200
Subject: [PATCH] Update README.md

Added a link to the SID string overview
---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index bf53572..1d3ffa4 100644
--- a/README.md
+++ b/README.md
@@ -141,7 +141,7 @@ This file uses the following configuration options:
 |uuid:| Match a specific uuid | both RPC Firewall and Filters|
 |action:| Can be either **allow** or **block** (default allow)| both RPC Firewall and Filters|
 |audit:| Can be either **true** or *false*. Controls whether events are written to the *RPCFW* log (default false)| both RPC Firewall and Filters|
-|sid:| matches an authenticated user to a [security identifier](https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/security-identifiers). Could be specific user or group.  | RPC Filters only
+|sid:| matches an authenticated user to a [security identifier](https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/security-identifiers). Could be specific user or group. For a list of accepted values please see the [SID overview](https://learn.microsoft.com/en-us/windows/win32/secauthz/sid-strings). | RPC Filters only