Hello As we discussed here: https://groups.google.com/forum/#!topic/wazuh/vdKsdOQX0QE
Sysmon provides the information that you need. Hope it help. Best regards, Alberto R. On Wednesday, April 25, 2018 at 7:28:01 PM UTC+2, Aj Navarro wrote: > > Hi everibody… > > > > Can the rootchek function detect pivoting in Windows Server 2008 or 2003? > > > > I got Ossec 2.8.3 win32 agent… > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.