RE: [ossec-list] Execute Command in OSSEC

2014-07-01 Thread Devon J. Greene
: Tuesday, July 01, 2014 4:39 PM To: ossec-list@googlegroups.com Subject: [ossec-list] Execute Command in OSSEC i have writed powershell script. this is content: ( it is detect new process) Clear-Content c:\old.txt; Clear-Content c:\new.txt; Clear-Content c:\compare.txt; Get-Process | Select-Object

[ossec-list] Execute Command in OSSEC

2014-07-01 Thread Nguyễn Văn Hớn
i have writed powershell script. this is content: ( it is detect new process) Clear-Content c:\old.txt; Clear-Content c:\new.txt; Clear-Content c:\compare.txt; Get-Process | Select-Object name|Format-Wide -Column 1 >old.txt; (gc old.txt) | Foreach {$_.TrimEnd()} | where {$_ -ne ""} | Set-Content