[ISSForum] Site protector Negate Regex issue (event log rule)

2005-12-20 Thread Ndungu, John
Team, I am trying to create a server sensor policy which would notify me when a particular user logs into a Windows 2000 OS environent and triggers defined event log rule. Suppose there are 3 users (john, tall and Mary) where John and Mary are admistrators of the system (tall is not), what would

[ISSForum] Inspect web mail

2005-12-20 Thread Claudia Patricia Prada Guzman
Some body knows how to inspect web mail (GMAIL, telcomails ) using Porventia G.? These equipment has two signatures that inspect attached files, but if I want to create a new signature using GMAIL, what do should I do ? Claudia Patricia Prada Guzmán

[ISSForum] TCL scripts for fusion module

2005-12-20 Thread Ndungu, John
David, Did Michael email you the scripts? Can I see them? I am trying to do the function below Negate Regex: I am trying to create a server sensor policy which would notify me when a particular user logs into a Windows 2000 OS environent and triggers defined event log rule. Suppose there are

Re: [ISSForum] Site protector Negate Regex issue (event log rule)

2005-12-20 Thread Italo Tapia
Hi John, Maybe you could try using exceptions, use the following example to find out if it works for you. Off course, you need to find the key for logins (not Restricted Application Executed as in the example) and found the exact string number that contains the type of login (administrator rights