We have a new snapshot available for testing. It includes the following new features (in addition of multiple bug fixes):Rules for Symantec AV.More information to the active response scripts and changed them to log to the logs directorySupport for glob formated files in the logcollector listRules for Windows Routing and Remote Access logs
In addition of these features, it also has the ones reported at http://www.ossec.net/dcid/?p=19.
Download it from http://www.ossec.net/files/snapshots/ and always make sure to get the latest file available.
**Testing the snapshots is one of the best ways to help with ossec development!.