This information is not logged by OSSEC as far as I can tell, so no. I'd like to see this info myself though, so I second this as a dev request.
On Dec 16 2011, 12:16 pm, Tom Paine <[email protected]> wrote: > When the integrity rules are fired for syscheck registry changes, is it > possible to show the old and new values in the email? > > Thanks
