I would like to perform a few basic tests on a few of OSSEC's capabilities and be able to document them. I have no experience with HIDS and I am not really sure where I could start or which tests with OSSEC I can perform and document.
My question is: could you perhaps point me or name a few basic tests on OSSEC (e.g. reverse shell into a virtual machine and detecting it with OSSEC) that I can look into?
Thank you!