Search found 20 matches

by cponton
Mon Jun 14, 2021 8:16 am
Forum: Help with other free stuff
Topic: Evereyone
Replies: 3
Views: 103

Re: Evereyone

OSSEC supports sending diffs when changes are made to text files on Linux and unix systems. Configuring syscheck to show diffs is simple, add report_changes="yes" to the <directories option. For example: <syscheck> <directories report_changes="yes" check_all="yes">/etc<...
by cponton
Thu Jun 10, 2021 9:11 am
Forum: Help with other free stuff
Topic: Evereyone
Replies: 3
Views: 103

Re: Evereyone

Yes! You will need to vim into /var/ossec/etc/ossec.conf and modify the file to include what directories you would like to watch: <!-- Directories to check (perform all possible verifications) --> <directories check_all="yes">/etc,/usr/bin,/usr/sbin</directories> <directories check_all=&qu...
by cponton
Tue Jun 08, 2021 8:40 am
Forum: OSSEC
Topic: How do I connect OSSEC Server and Client together in Virtualbox?
Replies: 4
Views: 91

Re: How do I connect OSSEC Server and Client together in Virtualbox?

Verify that you can ping the server box from the agent. A lot of times, when the HUB cannot detect the agent, it is because of either a firewall or a closed port.

Here are the documents for connecting agents to the HUB. https://www.ossec.net/docs/docs/manual/agent/index.html
by cponton
Fri May 28, 2021 5:44 pm
Forum: OSSEC
Topic: ERROR: Download failed with ERROR (6)
Replies: 6
Views: 864

Re: ERROR: Download failed with ERROR (6)

If you would like to try changing the password for the account, you can do so here:
www.atomicorp.com/amember/login

Once changed, update the oum.conf directly and then try and run oum update
by cponton
Mon May 24, 2021 8:28 am
Forum: OSSEC
Topic: ERROR: Download failed with ERROR (6)
Replies: 6
Views: 864

Re: ERROR: Download failed with ERROR (6)

Please go into the oum file at /var/ossec/etc/oum.conf and verify that the credentials have been input to the file and that they are correct. make any changes needed and then save the file.

The run oum update
by cponton
Thu May 20, 2021 9:45 am
Forum: Atomic Protector (formerly ASL)
Topic: ASL Kernel Status
Replies: 9
Views: 1364

Re: ASL Kernel Status

We do not have any documentation on the module at this time, no. When one is available, we will it post here.
by cponton
Thu May 20, 2021 9:10 am
Forum: OSSEC
Topic: TLS Support for OSSEC agent/master comms?
Replies: 1
Views: 418

Re: TLS Support for OSSEC agent/master comms?

Hello!

Both agent registration and communication are AES256 encrypted and handled via TLS by default
https://docs.atomicorp.com/AEO/index.html
by cponton
Fri Apr 16, 2021 9:12 am
Forum: OSSEC
Topic: oum update ERROR: Download failed with ERROR (6)
Replies: 3
Views: 1005

Re: oum update ERROR: Download failed with ERROR (6)

Please verify your credentials are entered correctly in /var/ossec/oum.conf

If you believe you may need a password reset, please email us at support@atomicorp.com so we can send that to your privately. Thanks!
by cponton
Mon Apr 12, 2021 9:05 am
Forum: OSSEC
Topic: ossec+
Replies: 3
Views: 1382

Re: ossec+

sp0k wrote: Sat Apr 10, 2021 6:13 pm Hi,
I've got the same problem. Tried with 2 different accounts but the problem remain.
I will be sending you an email from our support channel to assist with your issues.
by cponton
Thu Mar 18, 2021 8:22 am
Forum: OSSEC
Topic: oum install kofe: "no match"
Replies: 6
Views: 1824

Re: oum install kofe: "no match"

Only CentOS 7/8 and RHEL 7/8 are supported at this time for the OSSEC+ HUB. Ubuntu boxes can be added as agents, though.
by cponton
Tue Mar 02, 2021 10:38 am
Forum: OSSEC
Topic: ossec+
Replies: 3
Views: 1382

Re: ossec+

Hello!

Please verify the email you signed up under. If you would prefer, you can send that email to support@atomicorp.com and we can help you there so to keep your info private.
Thanks!
by cponton
Sat Feb 27, 2021 11:22 am
Forum: OSSEC
Topic: oum install kofe: "no match"
Replies: 6
Views: 1824

Re: oum install kofe: "no match"

Good morning! You should be able to install now:

oum install kofe

Please let us know if you encounter any issues. Thanks!
by cponton
Thu Feb 25, 2021 11:38 am
Forum: OSSEC
Topic: Where are the docs or support forum for ossec+?
Replies: 2
Views: 1404

Re: Where are the docs or support forum for ossec+?

Forgive the delayed reply!

You can find most documentation at https://www.ossec.net/docs/

If you have any questions that you cannot find a solution to on the docs site, please drop them here and we will do our best to answer them for you.
Thanks!
by cponton
Thu Feb 25, 2021 11:37 am
Forum: OSSEC
Topic: oum install kofe: "no match"
Replies: 6
Views: 1824

Re: oum install kofe: "no match"

I regret the delayed reply!

We currently have developers working on kofe for Centos 8 and we hope to have an update later today.
by cponton
Thu Feb 25, 2021 11:35 am
Forum: OSSEC
Topic: OSSEC usign too much bandwidth
Replies: 2
Views: 1324

Re: OSSEC usign too much bandwidth

I am sorry to hear that! We do have some checks you can do when there is high load issues. Please take a look here and see if any of these steps help:
https://support.atomicorp.com/hc/en-us/ ... h-CPU-load