No biggie, but I just noticed a typo in the online manual: http://www.ossec.net/main/manual/#iis
<location>%WinDir%System32LogFilesW3SVC3ex%y%m%d.log</location> should be: <location>%WinDir%\System32\LogFiles\W3SVC3\ex%y%m%d.log</location> If you omit the backslashes, Windows reads it like this: C:\>echo %WinDir%System32 C:\WINDOWSSystem32 as opposed to this: C:\>echo %WinDir%\System32 C:\WINDOWS\System32 Kevin Reiter Senior Security Engineer Financial Services, Inc. 21 Harristown Road Glen Rock, New Jersey 07452 Office: (201)652-6000, ext. 588 Mobile: (201)398-8679 PGP ID: 0xA36323B5 This message may contain confidential or proprietary information and is intended solely for the individual(s) to whom it is addressed. If you are not a named addressee you should not disseminate, distribute or copy this e-mail or act upon the information contained herein. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.
