OSSEC v2.4 released

Not april fools! We are very happy to announce the availability of OSSEC version 2.4.

What is new? We have lots of new features and bug fixes, but these are the main changes:

  1. Added daily email summaries/reports.
  2. Added option to alert when a log or command output changes – check_diff.
  3. Added rules to ignore crawlers causing 404s (MSN, Google, Yahoo, etc).
  4. Improved ossec-logtest to be used for the forensic analysis of log files
  5. Added support for Microsoft Security Essentials logs.
  6. Fixed a memory leak on the Windows agent that was not properly closing the sockets. It would cause a port exhaustion if the manager becames unavailable for a long period of time.
  7. Fixed performance issue when the FTS queue was too large.

Check out our v2.4 changelog for the complete list of new features and bugs fixed.

Download the new version from http://www.ossec.net/main/downloads

Posted in   ossec   releases     by Daniel Cid (dcid)

Coding for fun and profit. Often fun and little profit.