On Wed, Apr 11, 2018, 10:18 AM wrote:
> I'm using OSSEC HIDS
>
> from this i'm getting the alerts based on all events. but, i need to know
> a *user whom modified the specific file*.
> is this possible?
>
It's still not possible out of the box. You might be able
I'm using OSSEC HIDS
from this i'm getting the alerts based on all events. but, i need to know a
*user
whom modified the specific file*.
is this possible?
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group