Hello, is there a way to determine manually at what date the object in question did change (for the case, "full system scans" have been performed in the past) (if there is a requirement to examine objects which were not automatically monitored by OSSEC) ?
Thank's a lot for your feedback! John PS: I don't have any experience with OSSEC (yet) and i am probably using Non-OSSEC terms :-)
