[ossec-list] OSSEC and Masquerading attacks

[Kholidy]

Is OSSEC discovering the Masquerading attacks? If yes how? Please, If 
possible send me a link to a document which explains this point. 
 
Thanks, 
Hesham