The syscheck_control doesn't find anything.. -...@ossec:~# /var/ossec/bin/syscheck_control -r -i 001
Integrity changes for 'Windows Registry' of agent 'testvr (001) - 192.168.100.7': ** No entries found. Any idea? Thanks Bye d On Mar 18, 4:41 pm, smokey <[email protected]> wrote: > Hi > i have question regarding to monitoring registry entry with OSSEC (win > agent). > > For example: if i add new string value in registry under "HKLM\SOFTWARE > \Micro..\..\Run" then i don't how to view or get alerts that registry > was changed. The file integrity is working. > > I have made a printscreen:http://www.shrani.si/f/2J/y4/V6LuTT1/printscreen.jpg > > mdb5: a98402f3424440afebbb7e009ae99b97 > sha1: 2ec11162e6a965d4724cfdad444bf841bfd3c861 > > thanks > > best regards > dejan To unsubscribe from this group, send email to ossec-list+unsubscribegooglegroups.com or reply to this email with the words "REMOVE ME" as the subject.
