Atomicorp

Hi all, am hoping someone can give me an example of one "known good" simple custom rule and decoder for any kind of common Windows event. I have been trying/failing to figure out how to get any kind of custom rule to work for Windows clients running the ossec windows agent. I have an Ubunt...

Hi All, Am new to Ossec and this forum. I'm hoping to find a good "how to" link that covers how I am trying to set up my Ossec implementation (I may be missing this particular set up in the documentation and if so, apologize): - ubuntu server at aws with a static IP - primarily windows box...