Hello, I haven't had much luck finding these answers searching with google, but I may not be using the correct search terms. The questions below are in regards to File Integrity Monitoring Scans.
1) Does the Server or Agent initiate the scan? 2) Does the Agent use the settings from it's own ossec.conf (for instance, in windows: C:\Program Files\ossec-agent\ossec.conf) or does it use the settings from the servers ossec.conf (i.e. How often to run, what files/directories to monitor/ignore)? Thanks in advance, Patrick
