On Fri, Sep 30, 2011 at 9:25 AM, Exploding Fist <[email protected]> wrote: > Was there a specific reason why full refectory was not supported by ossec? > It would make rule creation 100x easier with far more accurate rules (less > false positives) >
I can't say for sure, but my speculation is complexity. > On Sep 29, 2011 7:28 PM, "dan (ddp)" <[email protected]> wrote: >> No, that isn't supported. >> >> On Thu, Sep 29, 2011 at 7:09 PM, BP9906 <[email protected]> wrote: >>> Can you use Regex Ranges [1-5] as an example? >>> >>> Seems to not be processed. >
