This documentation is mostly a re-write of the original documentation. It is currently a work in progress, and incomplete.
The original OSSEC documentation is included under the Legacy Documentation. As parts of it are replicated in the new repository, the old parts will be deleted.
If you are interested in assisting with the documentation, please jump right in. The current repository for the documentation is on github. Feel free to submit pull requests and open issues.
Issues and pull requests can be opened for everything from spelling mistakes to helping a section make more sense. What makes sense to an OSSEC veteran migth not make sense to someone using the software for the first time.