https://www.guiadoti.com/2017/04/ossec-trabalhando-com-agents-windows-hids-parte-3/
Ossec – Trabalhando com agents Windows – HIDS parte 3