Monitor Particular Folder On Windows Agent

[Akash Munjal]

Hi All,

Can I monitor a particular folder on desktop of my windows agent.

If yes then how it can be done. Also I want to monitor a particular drive(:C).

thanks...

[dan (ddp)]

Define "monitor." Do you mean syscheck monitoring? If so, add a
directories entry for it.
If you mean something else, please specify.

> thanks...
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Akash Munjal]

Hi Dan,

If i add or delete file in a particular folder on windows agent desktop.
I want to see their addition or deletion log on server/manager side.

[dan (ddp)]

If the directory is monitored by OSSEC (as defined with the
<directories> options in the ossec.conf), you should get notifications
for deletions. Notifications for added files requires a few changes
(mostly raising the level of the file added signature).