Hi everyone
I saw an article about configure active response in
ossec: https://wazuh.com/blog/blocking-attacks-active-response/
I have configured the direction and added some codes hoping that it will
prevent the attack, but it doesn't work.
I configured the following in ossec.conf:
firew
Can you guide me how to turn on active response on my ossec, mine is not
even working even I added the code block like you in my ossec.conf
On Friday, September 25, 2020 at 2:40:45 PM UTC+7 lê danh wrote:
> oh i did it and it works great, it can block me before i get my password,
> thank you so
