Anyway to use OSSEC to write a rule that would alert on the following: "If > X failed SSH login attempts, then Success -> Send alert"
Any pointers are appreciated. Phil -- Director of Security and Compliance RightScale Inc - http://www.rightscale.com 805-243-0942 Skype: phil.cox.rs Twitter: @sec_prof
