[ossec-list] Re: How to create some rules in OSSEC to detect certain computer is plugged by usb in the network?

[Jb Cheng]

First, find out what log entries were created when an USB is plugged into 
the remote computer.
Then, make OSSEC monitoring the particular log entries. 

On Wednesday, October 31, 2012 6:37:02 AM UTC-7, Tho Trinh Truong wrote:
>
> who can help me?thanks so much!