How to write a rule to detect a specific exe file for HIDS OSSEC?

I

iSerditykhRUS2017-06-04 09:44:16

System administration

iSerditykhRUS, 2017-06-04 09:44:16

What should be the syntax in the rule in local_rules.xml in HIDS OSSEC so that when running a specific exe file, OSSEC sends a message about this to OSSIM.

Reply

Answer the question

In order to leave comments, you need to log in

0 answer(s)

Similar questions

D

Denis Verbin2015-03-11 23:38:00

How to install BlackBerry Enterprise Server? 1Reply

D

Denis Sechin2017-03-16 11:27:13

How to prevent ftp user from ssh into server? 3Reply

V

Vitaly2019-08-13 17:35:45

Where is the database user file in ISPManager? 2Reply

L

Lite_robot2017-03-17 17:53:50

Linux: How to unzip an archive into a folder with the same name as the archive? 3Reply

D

DJDiM2021-03-11 15:16:12

How to transfer a large site to a new owner from ispmanager? 2Reply

Didn't find what you were looking for?

Ask your question