[ossec-list] Detecting Internet Access

[Mike Disley]

Anyone have a custom rule that would detect Outbound internet access on a 
Windows system?  I'm hoping to detect if/when someone uses a browser to access 
the web on a server with Internet connectivity.

Please and Thanks
Mike