i have finded the ruleid of integrity checking, and solve it. now only have question about *rootkit detection's alert level.*
在 2014年11月6日星期四UTC+8下午4时28分48秒，Sean Lin写道： > > how to change the alert level of integrity checking and rootkit detection > by default, the Alert level of integrity checking is 7, and rootkit > detection's is 3 > > 2014 Nov 06 03:48:53 > New file '/etc/openvpn/ccd/client' added to the file system. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
