OSSEC v2.4 released
Not april fools! We are very happy to announce the availability of OSSEC version 2.4.
What is new? We have lots of new features and bug fixes, but these are the main changes:
- Added daily email summaries/reports.
- Added option to alert when a log or command output changes – check_diff.
- Added rules to ignore crawlers causing 404s (MSN, Google, Yahoo, etc).
- Improved ossec-logtest to be used for the forensic analysis of log files
- Added support for Microsoft Security Essentials logs.
- Fixed a memory leak on the Windows agent that was not properly closing the sockets. It would cause a port exhaustion if the manager becames unavailable
for a long period of time.
- Fixed performance issue when the FTS queue was too large.
Check out our v2.4 changelog for the complete list of new features and bugs fixed.
Download the new version from http://www.ossec.net/main/downloads
Posted in
ossec releases
by Daniel Cid (dcid)
Daniel Cid Research
In this section you will find some of my research, project and articles. Look around and if you have any questions, reach out.
Contact us!
Do you have an idea for an article that is not here? See something wrong? Contact us at realpeople@noc.org
Tired of price gouging
Clear pricing. No need to guess. Real people. Real logging.