This is my config acitve response in Agent
<active-response>
<disabled>no</disabled>
</active-response>
<command>
<name>restart</name>
<executable>restart.cmd</executable>
<expect></expect>
</command>
<active-response>
<command>restart</command>
<location>all</location>
<level>7</level>
<rules_id>503002</rules_id>
</active-response>
Rule 503002 is detect new USB. i have write script restart.cmd is restart
computer to test. But when i attach usb i have alert new USB but active
response not running restart my computer. what is my wrong?
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
