Don't have Telegram yet? Try it now!
https://www.guiadoti.com/2017/08/ossec-entendendo-os-decoders-hids-parte-9/
Ossec - Entendendo os Decoders - HIDS parte 9