ossec agent error for directories C:\Windows\system32\drivers\testPTS

Support/Development for OSSEC
v4l3n71n
New Forum User
New Forum User
Posts: 1
Joined: Fri Jul 29, 2022 11:02 am

ossec agent error for directories C:\Windows\system32\drivers\testPTS

Unread post by v4l3n71n »

Hi,

I've got a problem about syscheck for C:\Windows\system32\drivers\testPTS with ossec agent 3.6.0 installed on Windows Server 2012 R2 using rules:
<directories realtime=yes check_all=yes>%WINDIR%/system32/drivers/testPTS</directories>, because agent ossec has a error in logs :

ssec-syscheckd: WARN: Error opening directory: 'C:\windows\system32\drivers\testPTS: No such file or directory
User avatar
cponton
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 61
Joined: Fri Oct 09, 2020 9:41 am

Re: ossec agent error for directories C:\Windows\system32\drivers\testPTS

Unread post by cponton »

Error opening directory: 'C:\windows\system32\drivers\testPTS: No such file or directory

This is saying the testPTS directory does not exist. It could also be that ossec does not have permissions to it.
Post Reply