OSSEC Commercial Support Contracts

OSSEC Commercial Support contracts will no longer be available directly from Trend Micro as of March 2014; however all existing agreements will continue to be fully supported until the end of their respective terms. If you are still interested in OSSEC and require commercial support, Trend Micro is aware of some 3rd party vendors who […]

OSSEC 2.7.1 Released

OSSEC 2.7.1 has been released and posted on our download page. You can check the release notes to find out what has been updated in this release.

OSSEC 2.8 Beta-1 is Available

The OSSEC developers have been hard at work on version 2.8 and we have made Beta-1 packages available for testing. See theDownloads page. Helps us with the testing and fine tuning of this preliminary release.

CVE-2014-0160 (Heartbleed bug) Advisory for OSSEC

The recently disclosed CVE-2014-0160 vulnerability – heartbleed read overrun – in OpenSSL may impact OSSEC installations where OSSEC was deployed with OpenSSL support, either when built from source or installed from RPMs. In particular this issue leaves ossec-authd open to attack. The CVE-2014-0160 vulnerability has been fixed in OpenSSL 1.0.1g. OSSEC users are advised to […]

Debian Packages Now Available

Our friends at AlienVault have created and now host Debian packages of OSSEC for Ubuntu Wheezy, Jessie and Sid. See the Downloads page for the links to the packages and AlienVault’s repositories. Thanks to OSSEC Project team member Santiago Gonzalez for taking the time to create these packages and AlienVault for hosting them And just […]

OSSEC Moving to Github

OSSEC is moving from bitbucket to github, and in the process moving to a new method for accepting contributions. This is an exciting change that we feel will help push OSSEC forward in 2014 and further into the future. oRFC:1 Collective Code Construction Contract (Adapted from ZeroMQ’s C4). The overall goals of the change are […]

OSSEC Log Management with Elasticsearch

Among the many useful features of OSSEC is its capability to send alerts to any system that can consume syslog data. This makes it easy to combine OSSEC with a number of 3rd party SIEMs to store, search and visualize security events. Splunk for OSSEC is one such system that works on top of the […]