Challenge in Siem detection and alerting guided exercise

Career Paths SOC Analyst
1

I am doing Part3 of the lab and executed sudo su to become root user,then I try to run this vi /var/ossec/ruleset/rules/0840-win_event_channel.xml and it says file is not found.Is there a part that I am missing?

2

Works for me…

image

image
image746×496 32.4 KB

3

Thanks Joseph ,let me try again