Hi Sam, On Mon, Feb 21, 2011 at 9:31 PM, Gibson, Samuel <[email protected]> wrote: > Hello List, > > > > I am just starting to look into OSSEC and am somewhat amazed by all the > options. Would I be able to use OSSEC to log what files a user accessed and > what times they accessed them? I would like to have a record of what user’s > do even if they don’t change the file. > > > > Thanks, > > Sam
You would be able to monitor that only if the OS is configured to monitor it. OSSEC would read these logs from the operating system, and be able to alert on that. It wouldn't monitor access to the file directly. dan
