Search found 2 matches
- Tue Aug 22, 2023 2:19 pm
- Forum: OSSEC
- Topic: Help: Custom Rule, Decoder, Testing Approach
- Replies: 1
- Views: 57521
Help: Custom Rule, Decoder, Testing Approach
Hi all, am hoping someone can give me an example of one "known good" simple custom rule and decoder for any kind of common Windows event. I have been trying/failing to figure out how to get any kind of custom rule to work for Windows clients running the ossec windows agent. I have an Ubunt...
- Wed Nov 16, 2022 5:08 pm
- Forum: OSSEC
- Topic: How to setup Ossec with Ubuntu server at AWS and local windows clients
- Replies: 1
- Views: 35914
How to setup Ossec with Ubuntu server at AWS and local windows clients
Hi All, Am new to Ossec and this forum. I'm hoping to find a good "how to" link that covers how I am trying to set up my Ossec implementation (I may be missing this particular set up in the documentation and if so, apologize): - ubuntu server at aws with a static IP - primarily windows box...