Hi, you can find information about auditd and OSSEC here: https://documentation.wazuh.com/current/user-manual/capabilities/system-calls-monitoring/index.html
Regards. On Monday, July 24, 2017 at 1:50:10 PM UTC+2, thefergus wrote: > > > On Fri, 21 Jul 2017 at 08:06, <yugandha...@gmail.com <javascript:>> wrote: > > I am new to ossec. I would like to monitor process through ossec. My plan >> is need to get the notification if some one start any new process or >> stop/kill any process. >> Can some one help me >> > > auditd logging execve. You can also have it log file access and metadata > updates. > > kmw > >> -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
