Configuration
Most detection policy for Atomic OSSEC agents is managed on the hub under Asset Management (File Integrity Monitoring, Anti-Virus Settings, Agent Firewall, and related group options).
The platform pages below cover optional host-local settings. A basic agent install does not require them. Enable ClamAV, memscan, or related syslog changes only when you want those features. When you do enable them, some steps must be done on the endpoint (starting services, confirming signatures) in addition to hub policy.