OSSEC HIDS

OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, Windows registry monitoring, rootkit detection, time-based alerting and active response.

It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows. A list with all supported platforms is available here:

http://www.ossec.net/wiki/index.php/Supported_Systems

HOME:

http://www.ossec.net/en/home.html

DOWNLOAD:

http://www.ossec.net/en/downloads.html

Grand Dad

OSSEC HIDS

Version 1.1 for Unix/Linux
Version 1.1 for Windows

Change Log:

http://www.ossec.net/announcements/v1.1-2007-03-12.txt

http://www.ossec.net/en/downloads.html

Grand Dad

OSSEC v1.3 released
August 8th, 2007 by dcid

We are pleased to announce the general availability of OSSEC version 1.3.
This is one of our biggest releases so far, our first under the GPLv3, with numerous new features and bug fixes.

This new version comes with the following major new features:
User interface to manage the Windows Agent. Screenshots here.
Support for Courier pop3/imapd logs. samples here.
Support for Cisco IOS logs.
Support for Symantec Web Security logs.
Support for SMF-SAV Sendmail filter logs.
Chinese Translation of the installation script.
Support for host-based policy monitoring/enforcement on Windows systems. More information here.

Check the v1.3 changelog to see all changes and contributors:

http://www.ossec.net/announcements/v1.3-2007-08-08.txt

Download it in here:

http://www.ossec.net/main/downloads

The OSSEC project has been acquired by Third Brigade.
Ottawa, ON and Reston, VA – June 16, 2008

The project remains open source, with additional resources and increased support availability to the OSSEC user community.

Announcement: OSSEC

OSSEC v1.5.1 released
June 19th, 2008

"We are pleased to announce the general availability of OSSEC version 1.5.1. This is the first version under Third Brigade and contain fixes for bugs found so far on the version 1.5. For a list of features in the version 1.5, please visit: OSSEC v1.5 released."

OSSEC HIDS

maybe some developer is italian???

OSSEC HIDS 2.0 released
We are pleased to announce the general availability of OSSEC version 2.0.
This new version is the first one with support for agentless monitoring and include many others new features and bug fixes:

• Compiled Rules - Per popular demand, we are introducing the capability in the product to be able to use pre-compiled rules written in “C”. Customers who felt that the XML format for writing rules was very limiting, can now use the strong programming capabilities of C.
• Agentless Monitoring - Lot of enterprises are faced with the requirement to monitor devices where there are restrictions on Agents to be installed either because of scalability requirements or due to the lack of the native operating system support. In version 2.0, Ossec customers can perform integrity checking and real time logs inspection on remote systems (such as Linux based devices, firewall devices such as PIX and routers etc).
• New Language Support - We added support for the Dutch language in the install
• New Log Rules Support - We added support for Yum logs and fixed/improved many of the other rules for different messages.
• New reporting tool - We added a new tool to create and help generate reports

And much more… Check the changelog to see all changes and contributors.

Download it from: http://www.ossec.net/main/downloads .