i have an IDS 4215 ,and i want that it give me a warnning when users make authentification windows or actice directory to some servers.should i add a signature or what?and i want to specify the servers which the warnning will be available.
how you can help me ,if i wanna just have a warnning for a log windows in some servers .or try just for one.the exemple is : when for exemple i'll make a log windiw in server x the IDS will give me a warnning for the log to tell me some one makes a l...
thank you ,but can you give me one exemple of custome signature with configuration to make it in the sensor.because i didn't found where to put for exemple the @ip of servers which i want to make warnning for them.
