Rules and Decoders

• Testing OSSEC rules/decoders
  • Testing using ossec-logtest
• CDB List lookups from within Rules
  • Use cases
  • Syntax for Lists
• Create Custom decoder and rules
  • Adding a File to be Monitored
  • Create a Custom Decoder
  • Historical
• Directory path loading of rules and decoders
  • Use case
  • Details
• Rules Classification
• Rules Group