ossec/ossec-hids — pull request #141 by juju4 (2014-03-15 03:18:27+00:00)
Title: Add rules/decoder for Apple MacOS X/Darwin environment

This is a base for a client/user environment.
For now rules number are in the user-range but could be probably changed once validated enough.

Still a work in progress. Please review and comment
It is tested with macports w the following Portfile
https://trac.macports.org/ticket/42533