Can ossec detect changes in the devices that are connected to the host? Maybe through the file integrity checker?
For example, if someone plugs a usb memory stick into a machine. -- Richard Geddes BlueGolf - www.BlueGolf.com [email protected] | 610-293-0998 | 610-293-0987 (fax)
