diff --git a/0_custom_configuration/file_delete_modules.txt b/0_custom_configuration/file_delete_modules.txt
index b433c63..b1dc2e6 100644
--- a/0_custom_configuration/file_delete_modules.txt
+++ b/0_custom_configuration/file_delete_modules.txt
@@ -1,6 +1,8 @@
 23_file_delete/exclude_google_chrome.xml
+23_file_delete/exclude_sophos_journal_temp.xml
 23_file_delete/exclude_windows_services.xml
 23_file_delete/include_microsoft_sql_server.xml
 23_file_delete/include_qualys.xml
 23_file_delete/include_user_writable_folders.xml
 23_file_delete/include_writable_folders.xml
+23_file_delete/include_interesting_files.xml
\ No newline at end of file
diff --git a/23_file_delete/interesting_files.xml b/23_file_delete/include_interesting_files.xml
similarity index 100%
rename from 23_file_delete/interesting_files.xml
rename to 23_file_delete/include_interesting_files.xml
diff --git a/Merge-SysmonXml.ps1 b/Merge-SysmonXml.ps1
index f75d65b..7a31560 100644
--- a/Merge-SysmonXml.ps1
+++ b/Merge-SysmonXml.ps1
@@ -533,10 +533,6 @@ function Merge-SysmonXml
     <RuleGroup groupRelation="or">
         <FileDelete onmatch="include"/>
     </RuleGroup>
-    <!-- Event ID 23 == File Delete and overwrite events - Excludes -->
-    <RuleGroup groupRelation="or">
-        <FileDelete onmatch="exclude"/>
-    </RuleGroup>
     <!-- Event ID 24 == Clipboard change events, only captures text, not files - Includes -->
     <RuleGroup groupRelation="or">
         <!-- Default set to disabled due to privacy implications and potential data you leave for attackers, enable with care!-->