OSSEC HIDS - PSJoshi/Notes GitHub Wiki

Installation

• https://digitalenvelopes.email/blog/how-to-install-and-configure-ossec-server-ossec-client-in-debian/
• http://linoxide.com/security/ossec-installation-ubuntu-14-04-part1/
• https://www.rosehosting.com/blog/install-ossec-agent-on-ubuntu-14-04/
• https://www.rosehosting.com/blog/install-ossec-on-ubuntu-14-04/
• http://idroot.net/tutorials/how-to-install-ossec-on-ubuntu-14-04/

Interesting use-cases

• Logstash config for OSSEC - https://gist.github.com/sakalajuraj/12e0f45a3e9993e6d8b1
• OSSEC alternatives - https://github.com/freedomofpress/securedrop/issues/1123
• OSSEC typical usage:
  • https://dcid.me/texts/my-ossec-setup-manual.html
  • https://blog.savoirfairelinux.com/wp-content/uploads/2014/03/SFL-ED01-OSSec-the-quick-and-dirty-way-140326-01.pdf
• http://ddpbsd.blogspot.in/2010/10/ossec-rules-101.html
• http://intellavis.com/blog/?p=257
• OSSEC Installation with GUI - https://raymii.org/s/tutorials/OSSEC_2.8.0_Server_Client_and_Analogi_Dashboard_on_Ubuntu.html