I have tried, but it didn't work. Tried one more time and now it works. Mysticism
Thanks for effort. On Monday, 21 October 2013 17:12:54 UTC+3, dan (ddpbsd) wrote: > > On Mon, Oct 21, 2013 at 10:00 AM, Kaspars Līcis > <[email protected]<javascript:>> > wrote: > > Hello, I am trying to create rule that alerts if someone accessed to > > specific folder in wondows server. > > Issue is that if I write- <match>E:\\HOMES\\HOME02\\secret</match> ossec > > don't detect it > > > > path is E:\HOMES\HOME02\secret > > > > Did you try just using the path? > > > If I write <match>secret</match> it is working. Is it way how to define > full > > path? > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/groups/opt_out. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
