[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-list] Help needed with rules

To: <ossec-list@xxxxxxxxxxxxxxxx>
Subject: [ossec-list] Help needed with rules
From: "Phillip Wheat" <Phillip.Wheat@xxxxxxxxxxxxx>
Date: Wed, 15 Aug 2007 12:49:22 -0500
Content-class: urn:content-classes:message
Thread-index: AcffZJ0AnwT/iczhSeKh+RKpdjpSpg==
Thread-topic: Help needed with rules

After fighting trying to suppress Windows "flak" without voiding the entire rule, I'm giving up.

Are there any resources available FOR HIRE that can help me fine-tune the OSSEC ruleset in

a Windows environment?

---------------------------------------------------------------------------

Phillip R. Wheat

Sr. Vice President

Peoples Bank & Trust Company

334-418-8329 Work

877-469-1666 Cell Toll Free

334-872-7516 Home

phillip.wheat@xxxxxxxxxxxxx bank email

pwheat@xxxxxxxxxxxxxxx alternate email

"Presence and proximity is no longer an excuse ... let's make some money!" ... Me

Follow-Ups:
- [ossec-list] Re: Help needed with rules
  - From: evilghost@xxxxxxxxxxxxxx

Prev by Date: [ossec-list] Frequent disconnects of agent on Dell PowerEdge 2950 Windows Storage Server 2003 R2Standard Edition x64, HardwareRAID
Next by Date: [ossec-list] Re: POP3 brute force rule not firing
Previous by thread: [ossec-list] Re: Frequent disconnects of agent on Dell PowerEdge 2950 Windows Storage Server 2003 R2Standard Edition x64, HardwareRAID
Next by thread: [ossec-list] Re: Help needed with rules
Index(es):
- Date
- Thread

OSSEC home | Main Index | Thread Index

OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.