Hi! You need first of all configure windows audit for logging processes starts etc. Then you need to create appropriate decoders and rules for OSSEC.
воскресенье, 29 марта 2015 г., 14:22:01 UTC+3 пользователь Nhen Panha написал: > > Hi sir! > > Last week I have install OSSEC to monitor my Windows Server and Windows > 8.1. > > I want to control all activities that users do something in My Windows for > example I want to know when user open browser, copy document, ............. > > What should I config OSSEC manager and my Windows? > > Help me please? > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
