Could this report also include the date the rule was created? This way we could see if this correlates with a previous known incident.