Newbie question here - I'm trying to monitor specific folders on different
drives. Which is the correct syntax? Which slash(/ or \) is it supposed to be?
I would guess it matters...
<!-- Default files to be monitored - system32 only. --><directories
check_all="yes">C:\Documents and Settings/All Users/Start
Menu/Programs/Startup</directories> <directories
check_all="yes">C:\Test/OSSEC</directories> <directories
check_all="yes">D:/Program
Files/FAR_NET_RPP_DIRECT/root</directories><directories
check_all="yes">E:\Program
Files/FAR_NET_CONSUMERS_2005/root</directories><ignore
type="sregex">.log$|.htm$|.jpg$|.png$|.chm$|.pnf$|.evtx$</ignore> Thanks,-Mark
