Hi Ossec-List I need to confirm a change of a file on a file basis. in the moment i'm only able to rebuild the integrity database for the qhole system. But i want to confirm only one change at one file. How can i do that? Exists there a command for that like: syscheck_update-u 001 -f /etc/ hosts
Or is there another way? Regards, Daniel
