Hello, I would like to know how i can get ossec to alert me any time a find with the extention of .asp is placed with the c:\inetoub directory running windows server 2003.
<directories check_all="yes">c:\inetpub/*.asp</directories> or how do you do it with a file ext like .asp can you do *.asp or ,asp$ Also, what frequency can I set, can you set it to 1 min / 60 secs, or is there a better way using the realtime option. Thanks, Mike
