You can configure OSSEC-HIDS to add all the events to database.
On Jun 20, 11:15 pm, JM <[email protected]> wrote: > I'm looking for some advice on methods used to document local rules or > rule changes in your environment. > > Do you just use a spreadsheet? Or do you check the config files into > an SVN,git, or CVS repository? How do you track & authorize changes > (if at all?) > > Thanks. > > JM
