OSSEC configure that SIEM collects every Windows event
How to configure OSSEC Agent on Windows so SIEM show's all Windows events.
I enable plugin OSSEC and install default installation on Windows Server 2008 R2+ossim adress and key.
OSSIM starting to get data but it does not getting all of Windows Event log.
How to configure that all/every event is shown in SIEM GUI console?
0 · ·