Herb Steck wrote: > I have some servers (both 32 & 64bit) Windows 2003 R2 servers that after > reboot the ossec service & lsass.exe start to take over the cpu running > at about 50% utilization. What can be causing this? Anyone have any ideas?
OSSEC will read the new event log entries and do a syscheck when starting. Do you have a high amount of logging enabled, such as with object access?
