That's what I figured...I set one up to monitor the ossec service. Thanks
On Dec 6, 4:07 pm, "dan (ddp)" <ddp...@gmail.com> wrote: > On Mon, Dec 6, 2010 at 3:59 PM, Chris <cwhites...@yahoo.com> wrote: > > If I remove the registry check, the agent does not seem to recognize > > that I want a directory check and does nothing. Is there any way to > > bypass the registry check? > > Apparently not. Just setup a registry check for some inconsequential > registry entry that won't really trip any alarms.
