Thanks everyone for the reply. My purpose is to stem a software agent inside windows 7. several weeks but had I can not figure out how to implement it. Can you help me?
2014-06-02 19:42 GMT+07:00 Jeremy Rossi <[email protected]>: > It's wonderful that you guys are talking about OSSEC. But for the > others from around the world that don't understand vietnamese could you > please use English? Thank you. > I have not used active response for editing the registry, but I am sure > it oculd be done in a script. How you do this form the command line? > Once you know that it's simple to write a script to implement that > command line and be added to active response. > * Trieu Ngo Duy <[email protected]> [2014-06-02 17:25:36 +0700]: > > hi v???y mình nói ti???ng vi???t cho d??? ha. b???n hi???u nhi???u v??? >> active response >> không? >> nh?? câu h???i phía trên mình mu???n th???c hi???n l???nh này: REG ADD >> HKCU \ Software >> >> \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ DisallowRun >> ????? thêm m???t m???c vào registry bên agent windows b???n có th??? giúp >> mình không? >> mình c??ng m???i b???t ?????u v???i ossec nên còn nhi???u th??? ch??a >> bi???t l???m. >> n???u b???n có gì mu???n h???i? có th??? giúp ???????c mình s??? c??? >> g???n :) r???t vui khi quen >> b???n >> >> >> >> 2014-06-02 13:42 GMT+07:00 Nguy???n V??n H???n <[email protected]>: >> >> >>> Hi. I come from Vietnam. And i have project for OSSEC. we can talk to >>> each other about OSSEC? >>> Vào 09:37:56 UTC+7 Th??? hai, ngày 02 tháng sáu n??m 2014, Trieu Ngo Duy >>> ??ã >>> vi???t: >>> >>> >>> help me about active response. how to execute this command: REG ADD HKCU >>>> \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer >>>> \ >>>> DisallowRun in agent window ? >>>> thank you very much..! >>>> >>>> -- >>> >>> --- >>> You received this message because you are subscribed to the Google Groups >>> "ossec-list" group. >>> To unsubscribe from this group and stop receiving emails from it, send an >>> email to [email protected]. >>> For more options, visit https://groups.google.com/d/optout. >>> >>> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. >> > > -- > > --- You received this message because you are subscribed to the Google > Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
