On Wed, 2 Mar 2011 15:57:31 -0800, Jeremy Lee <[email protected]> wrote:
For Oracle, is OSSEC looking at the oracle logs? I'm assuming there
wouldn't
be much coverage in an older version (i.e. Oracle 9i - limited
audit/security log capabilities) right?
Right, at least initially. Oracle 10g+ will be supported on 'nix, then
Windows. After that, I may look at using agentless or some other method
to query the SYS.AUD$ table so earlier versions can be supported.
--
Michael Starks
[I] Immutable Security
http://www.immutablesecurity.com
