[EMAIL PROTECTED] wrote: > Dear Mailing list > > Is there be any provision to install the windows agent in stealth > mode. So that the ossec services can be hidden from windows services & > taskmanager. > > The query is raised to keep the monitoring activty abtracted from the > end user.
I'm not sure about this, but I recommend that you don't hide it. Not only should users be made aware that they are being monitored for legal reasons, but just the fact that they know this acts as a deterrent to improper behavior.
