config case_sensitive = false | preset=xdr_file | filter event_type = ENUM.FILE and 
 (agent_os_type = ENUM.AGENT_OS_WINDOWS and 
 ((action_file_name in ("*А*", "*В*", "*Е*", "*К*", "*М*", "*Н*", "*О*", "*Р*", "*С*", "*Т*", "*Х*", "*Ѕ*", "*І*", "*Ј*", "*Ү*", "*Ӏ*", "*Ԍ*", "*Ԛ*", "*Ԝ*", "*Α*", "*Β*", "*Ε*", "*Ζ*", "*Η*", "*Ι*", "*Κ*", "*Μ*", "*Ν*", "*Ο*", "*Ρ*", "*Τ*", "*Υ*", "*Χ*")) or 
 (action_file_name in ("*а*", "*е*", "*о*", "*р*", "*с*", "*х*", "*ѕ*", "*і*", "*ӏ*", "*ј*", "*һ*", "*ԁ*", "*ԛ*", "*ԝ*", "*ο*"))))