Search found 1 match
- Wed Dec 20, 2023 2:42 am
- Forum: OSSEC
- Topic: Help: Custom Rule, Decoder, Testing Approach
- Replies: 1
- Views: 60267
Re: Help: Custom Rule, Decoder, Testing Approach
Hi all, am hoping someone can give me an example of one "known good" simple custom rule and decoder for any kind of common Windows event. I have been trying/failing to figure out how to get any kind of custom rule to work for Windows clients running the ossec windows agent. I have an Ubun...