On Tue, Nov 20, 2012 at 9:51 AM, stones2125 <[email protected]> wrote: > I am new to OSSEC and have been trying to figure out how to do the > following...if possible. > > - When a file changes on a Windows server, how do I see the username of the > person who changed it.
You can't. > - How do I see the actual changes (lines of text) > You can't. > I get the alert that shows the file checksum changed, but need more info.
