I installed OSSEC-9.3 on a Windows 2000 Domain Controller, and I am getting several alerts related to "Windows Logon Success" for type 3 logins (network). How can I filter out these type 3 logins, but still be notified of logins at the console (type 2 - interactive)?
Visit Jamaica's Tech Portal http://www.techjamaica.com
Everyone is raving about the all-new Yahoo! Mail.
