Hi Jayalaxmi, Could you explain a little bit more your intentions? What do you mean by "Application installation" ? Linux or Windows ?
If you mean detecting a new software installation in the host, OSSEC is fetching by default some logs from Debian dpkg, a new package will trigger rule 2902 "New dpkg (Debian Package) installed.". Same thing for yum (el/rhel), rule id 2932 "(New Yum package installed.)". Best regards, Pedro Sanchez. On Mon, Mar 20, 2017 at 1:04 PM, Jayalaxmi <jayakanchan...@gmail.com> wrote: > Hi Team, > > could you please let me know , if application installation can be > monitored using OSSEC?? > Please let me know the rule for the same. > > Thanks in advance > Jaya > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
