@Tomer_Sole I can under to a degree not including the rule UID and not the number due the the possibility of the display rule number changing, make some sense. That said, i see other UID with seem to obfuscate troubleshooting or audit actions that have been performed, why for instance would this be necessary
ActionSettings.action: Changed from '6c488338-8eec-xxxx-xxxx-xxxxxxxxxxxx' to '6c488338-xxxx-xxxx-xxxx-xxxxxxxxxxxx'
Where the action has been changed from drop to accept. It doesnt make it easy to see what went on with this particular edit.