I'm using OSSEC server to monitor machines with OSSEC agents, which monitor this login via SSH, file creation, etc.
I have configured OSSEC to send an email when it detects a problem, but this control mode is very bad for data control and…
Today I use OSSEC as HIDS, but reading Wazuh's site it seems to be more modern and has more resources.
I saw that it has an Elastic Stack integration, something I don't interested about due to using Java and using a lot of server resources.
Does…
I would like to perform a few basic tests on a few of OSSEC's capabilities and be able to document them. I have no experience with HIDS and I am not really sure where I could start or which tests with OSSEC I can perform and document.
My question…
I am involved in a project which deals with PCI-DSS compliance. Particularly, there is a requirement to implement FIM (File Integrity Monitoring) for critical devices.
Within these devices, there are unix-based firewall and routers, with specific…
This question is similar with this one:
OSSEC capabilities for handle a virus that already spread into the deepest system
But it didnt roughly answer how could i do that exactly. I have tried Wazuh app for maybe 5 months in a row, as far as i know,…
I have problem with some institute server. The scenario is like below.
There is an institute (Government/Corporate/Industry) that have their own dedicated server. But there is no other security services or firewall that were implemented on these…
Do I really need a HIDS like ossec, or will using good passwords, using a firewall, an antivirus/antimalware program, and a rootkit scanner do the job well enough?
Hey Guys I am a newbie in security stuff and now I am working on my final project about host based IDS. I have some questions to you guys
Can a rootkit be classified as an intrusion or is it a malware or both of them ? What's the difference between…