2 cents
> Kat
>
> On Tuesday, September 25, 2012 11:57:01 AM UTC-7, JB wrote:
>>
>> I know there are deployments of more than 3000 agents on one OSSEC
>> server.
>> You need to keep an eye on the amount of network traffic though.
>> Overloading can result in lo
Dears,
Is there any one knows large scale development ? I want to implement
over 1 set. There is an issue on how to deployment client key and
management.
Could you share any experience?
Many thanks.
Br. JJ
thanks!
ossec
syscheck_new_entry
keylog.exe
File added to the system.(Intrusion)
syscheck,
2012/8/28 dan (ddp)
> On Sun, Aug 26, 2012 at 11:15 PM, JJ Yu wrote:
> > I was write rule in ossec_rules.xml. but it is not effect. Please help~~~
> > as :
>
added to the system.(Intrusion)
syscheck,
2012/8/27 Frank Stefan Sundberg Solli
> You need to add it to local_rules.xml
>
>
> On Mon, Aug 27, 2012 at 5:15 AM, JJ Yu wrote:
>
>> I was write rule in ossec_rules.xml. but it is not ef
I was write rule in ossec_rules.xml. but it is not effect. Please help~~~
as :
ossec
syscheck_new_entry
File added to the system.
syscheck,
ossec
syscheck_new_entry
^keylog.exe^
File added to the system.(Intrusion)
syscheck,