On 06/03/2014 07:55 PM, Trieu Ngo Duy wrote:
I was watching the installation of unauthorized software agent. I was
warned. I now want to block software that runs it how? My idea is to add
one command to the registry. for example: I discovered the agent
installation, the agent Fifox I can ban runs piece using the following
command:
REG ADD HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \
Policies \ Explorer \ DisallowRun / v 1 / t REG_SZ / d fifox.exe
My question is how we can from OSSEC server running software blocking
agent. if you can give me an example. thanks all
OSSEC is not the right tool to block unauthorized software
installations. Remove the user's administrator privileges and if that's
not enough, look into application whitelisting tools.
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
