Latest Development Unix/Linux Version

You can get the latest development version from BitBucket here: ossec-hids-development

Unix/Linux Version 2.7.1 Alpha-1

OSSEC for Linux, Solaris, *BSD, Mac, AIX and variants:
ossec-hids-2.7.1-alpha-1.tar.gz       Checksum – License

OSSEC Web UI v0.8 Alpha-0

ossec-wui-0.8-alpha-0.tar.gz          Checksum – License
Installation tutorial at: OSWUI wiki entry.

Latest Stable Unix/Linux Version 2.7

OSSEC for Linux, Solaris, *BSD, Mac, AIX and variants:
ossec-hids-2.7.tar.gz        Checksum – License

Version 2.7 Release  Release Notes

Latest Stable Windows Agent Version 2.7

OSSEC for Windows 2000, XP, Vista, 7 and Windows Server 2003, 2008, 2012:
ossec-agent-win32-2.7.exe         Checksum – License

Unix/Linux Version 2.6

OSSEC for Linux, Solaris, *BSD, Mac, AIX and variants:
ossec-hids-2.6.tar.gz        Sig – Checksum – License

Version 2.6 Release Notes

Windows agent Version 2.6

OSSEC for Windows 2000, XP, Vista, 7 and Windows Server 2003, 2008, 2012:
ossec-agent-win32-2.6.exe         Sig – Checksum – License

RPMs for RHEL, CentOS, Fedora and others

Available in the AtomiCorp repository. To install:

# wget -q -O - https://www.atomicorp.com/installers/atomic |sh
# yum install ossec-hids ossec-hids-server (or ossec-hids-client for the agent)

OSSEC Web UI v0.3

ossec-wui-0.3.tar.gz          Sig – Checksum – License
Installation tutorial at: OSWUI wiki entry.

PGP key

Before you install any package from our project, we recommend that you verify it using our PGP key. Follow these two steps if you are not used to using gpg. You first need to import our public key:

ossec-test# wget http://www.ossec.net/files/OSSEC-PGP-KEY.asc
ossec-test# gpg –import OSSEC-PGP-KEY.asc

And then verify each file against its signature:

ossec-test# gpg –verify file.sig file

You should get the following result:

gpg: Signature made Tue 19 Jul 2011 03:13:58 PM BRT using RSA key ID A3901351
gpg: Good signature from "Daniel B. Cid "
Primary key fingerprint: 6F11 9E06 487A AF17 C84C E48A 456B 17CF A390 1351

*Note that the key expiration date was changed lately. If you get an warning saying “gpg: Note: This key has expired!”, make sure to update the key and run the “import” command again (as specified above).

Contribute back!

If you find ossec useful and would like to contribute back to the community, please contact us.  We have a lot of work to do and any help is appreciated.