OSSEC v2.3 BETA available (testers wanted)

[Daniel Cid]

Hi list,

OSSEC v2.3 BETA1 is now available and we need testers. You can find
information on how to help us at
http://www.ossec.net/wiki/Dev:BetaTesting

If you ever wanted to contribute to OSSEC (or to any open source
project) that’s the easiest way to get involved.
Just download the BETA, check if everything still works, if you have
time try out some of the new features and let us
know how it goes. You can submit your feedback in here, via the wiki,
to the mailing list or personally to me via email.

http://www.ossec.net/wiki/Dev:BetaTesting

List of new features:
http://www.ossec.net/announcements/v2.3.txt

We appreciate any feedback.


thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

[Neil]

What does "-Added support for real time integrity monitoring on
Windows systems." mean specifically? Isn't this working on v2.2
already?

On Nov 23, 1:21 pm, Daniel Cid <daniel....@gmail.com> wrote:
> Hi list,
>
> OSSEC v2.3 BETA1 is now available and we need testers. You can find

> information on how to help us athttp://www.ossec.net/wiki/Dev:BetaTesting

[Peter M. Abraham]

Greetings Daniel:

Has upgrading been fixed so that if you want to update rules, BUT keep
your rule exclusions in /var/ossec/etc/ossec.conf your exclusions are
not clobbered?

i.e.

<!--
<include>arpwatch_rules.xml</include>
<include>symantec-av_rules.xml</include>
<include>symantec-ws_rules.xml</include>
-->

Where the above three rules are excluded in ossec.conf. Upgrading
ossec clobbers the above changes; and yet, we don't want to say no to
rule upgrades because there may be updates to rules we do use.

Please advise.

Thank you.

[Jakub Moravek]

Hi Daniel,
great news! I found lot of lovely features in changelog. Please,
can you explain what means "support for monitoring the output of
commands on Linux and Windows"?

Jakub

On 23 lis, 20:21, Daniel Cid <daniel....@gmail.com> wrote:
> Hi list,
>
> OSSEC v2.3 BETA1 is now available and we need testers. You can find

> information on how to help us athttp://www.ossec.net/wiki/Dev:BetaTesting

[dan (ddp)]

I think the following link explains that: http://www.ossec.net/dcid/?p=186

[Daniel Cid]

Hi Neil,

On version 2.2 we only had support for real time integrity monitoring
on Linux systems.
On version 2.3 we added for Windows.

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net