I have script file eject USB is eject.cmd had content:
$a =Get-WmiObject win32_logicaldisk -filter 'DriveType=2' |
ForEach-Object{$kt = $_.DeviceID
$Eject = New-Object -comObject Shell.Application
$Eject.Namespace(17).ParseName("$kt").InvokeVerb("Eject")
}
Where can I put this file(in agent-window or server-centOS).
Plus question:
I learned from this
link:
http://ossec-docs.readthedocs.org/en/latest/manual/monitoring/process-monitoring.html
when I plug usb first time--->I get 1 alert, but when I plug it again, I
didn't get another alert. Why and how I get more alert
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
