Just downloaded 4.2, did upgrade which cleared lots of alerts but still getting "ossec:integrity checksum changed" and occasionally with the addition of "again (second time" at the end.
Looking it up I have noted 2 responses: One is edit to disable pre-linking. Second is "you may have been hacked."
How do I address this or get rid of it under Analysis > Security Events (SIEM)
Any helpful responses are greatly appreciated. Thank you.