Ossec notes

1. Install ossec-hids-server/client
   1. temporarily setting mail to go to root@localhost
2. setup mysql?
   1. http://www.ossec.net/wiki/Know_How:DatabaseOutput
3. Setup the clients/server:
   • http://www.ossec.net/main/manual/manual-manage_agents-tool
4. web gui:
   • http://www.ossec.net/files/ui/ossec-wui-0.3.tar.gz
   • http://www.ossec.net/wiki/OSSECWUI:Install
5. patch the web gui: http://marc.info/?l=ossec-dev&m=133164807632254&w=2
6. make new files alert:
   1. http://www.ossec.net/wiki/Know_How:Syscheck

http://www.ossec.net/wiki/Category:Know_how