OSSEC HIDS is an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, rootkit detection, time-based alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, Solaris and Windows.

This new release comes with numerous new features, including active response for PF, policy-based rules (based on time and dates), scripted installs and new rules for horde imp, solaris ftpd, vsftpd, samba, telnet, pam and nmap output files.

In addition to that, the Windows agent was heavily improved, with multiple bug fixes and the inclusion of integrity checking (syscheck ported to windows).

We also have our translations completed to French, Russian and Japanese (besides Portuguese, Polish, German, Turkish and Italian).

Full changelog:

To download the new version:

More information at:
OSSEC - World's Most Widely Used Host Intrusion Detection System - HIDS

The link for this article located at OSSEC.net - Daniel Cid is no longer available.