Hi All,
I have problem with my ossec - on website ossec-wui I don't see any information about delete files or folders ( on Windows machines)
Ossec SRV is on Centos 6.7 , ossec ver is 2.9.2.
When I delete folder from Windows 7 ( File Auditing is on and I see in EventLog information about delete files ID 4663) I don't see info in ossec about delete folder and I don't know why? :( Anyone Can help me?