On Mon, Mar 5, 2012 at 7:01 PM, Stephane Rossan <[email protected]> wrote: > Hello, > > I would like to update the internal syscheck database, used in my OSSEC > local deployment. What is the best way?
Run a syscheck scan? > I use the same system image everywhere, and would like to get a new syscheck > database generated once, on a reference machine, and use it everywhere else. > > Will it be possible? > Maybe, try it. Doing a baseline scan for each system is pretty much the same as the regular scan though, so I'm not sure if this will help or not. > Let me know. > Thanks, > -Stephane R.
