• Support
  • Forums
  • Blogs

what is "ossec:Integrity checksum changed"


Big Time
Just downloaded 4.2, did upgrade which cleared lots of alerts but still getting "ossec:integrity checksum changed" and occasionally with the addition of "again (second time" at the end.

Looking it up I have noted 2 responses: One is edit to disable pre-linking. Second is "you may have been hacked."

How do I address this or get rid of it under Analysis > Security Events (SIEM)

Any helpful responses are greatly appreciated. Thank you.

Share post:

This discussion has been closed.