How to write a rule to detect a specific exe file for HIDS OSSEC?

I

iSerditykhRUS2017-06-04 09:44:16

System administration

iSerditykhRUS, 2017-06-04 09:44:16

What should be the syntax in the rule in local_rules.xml in HIDS OSSEC so that when running a specific exe file, OSSEC sends a message about this to OSSIM.

Reply

Answer the question

In order to leave comments, you need to log in

0 answer(s)

Similar questions

M

Michael2020-04-16 16:11:08

How to tweak the ccze color scheme a bit? 1Reply

Z

zjmaster2015-09-27 09:33:17

There are computers on a network with three subnets 192.168.0-2 with a mask of 255.255.255.0, how can I add a network with addresses like 10.0.0.0? 4Reply

O

Oleg2011-02-02 13:06:17

Remote PC administration 9Reply

V

Vasya Pupkin2021-06-10 09:49:26

How to implement a shared company calendar in MS Outlook? 2Reply

Didn't find what you were looking for?

Ask your question