This setup requires three types of servers: servers being monitored by an OSSEC client, an OSSEC server, and an Elasticsearch & Kibana server. This server will have OSSEC server and Logstash running ...

We noticed that removing configuration block from ossec.conf sometimes it doesn't result in module disabled. We could see the Logcollector or Syscheck example. If we ...

This is the first of some posts that’ll walk you through setting up, tuning and maintaining your very own host-based intrusion detection system. This will provide you with a powerful security ...

For security analysts working on Linux, the lack of flexible, transparent and comprehensive tools is an ongoing problem. As is often the case, security professionals are turning to open-source ...