# filelist

dirname: /var/ossec/agentless
filetypes: ffffffffffff
filenames:
  main.exp/register_host.sh/ssh.exp/ssh_asa-fwsmconfig_diff/ssh_foundry_diff/ssh_generic_diff/ssh_integrity_check_bsd/ssh_integrity_check_linux/ssh_nopass.exp/ssh_pixconfig_diff/sshlogin.exp/su.exp


dirname: /var/ossec/active-response/bin
filetypes: fffffffffffffff
filenames:
  ar-tracking.sh/cloudflare-ban.sh/disable-account.sh/firewall-drop.sh/firewalld-drop.sh/host-deny.sh/ip-customblock.sh/nftables-drop.sh/ossec-aws-waf.sh/ossec-pagerduty.sh/ossec-slack.sh/ossec-tweeter.sh/restart-ossec.sh/route-null.sh/zabbix-alert.sh


dirname: /var/ossec/etc/templates
filetypes: ffffffffffff
filenames:
  active-response.template/apache-logs.template/ar-disable-account.template/ar-firewall-drop.template/ar-host-deny.template/ar-routenull.template/pgsql-logs.template/rootcheck.template/rules.template/snort-logs.template/syscheck.template/syslog-logs.template


dirname: /var/ossec/bin
filetypes: fffffff
filenames:
  agent-auth/client-execd/client-logcollector/client-syscheckd/manage_agent/ossec-agentd/ossec-client.sh


dirname: /var/ossec/ossec-agent/active-response/bin
filetypes: fffffffffffff
filenames:
  cloudflare-ban.sh/disable-account.sh/firewall-drop.sh/firewalld-drop.sh/host-deny.sh/ip-customblock.sh/nftables-drop.sh/ossec-aws-waf.sh/ossec-pagerduty.sh/ossec-slack.sh/ossec-tweeter.sh/restart-ossec.sh/route-null.sh


dirname: /var/ossec/ossec-agent/etc/shared
filetypes: fffffffffffffffffffffffffffffffff
filenames:
  acsc_office2016_rcl.txt/agent.conf/cis_apache2224_rcl.txt/cis_debian_linux_rcl.txt/cis_debianlinux7-8_L1_rcl.txt/cis_debianlinux7-8_L2_rcl.txt/cis_mysql5-6_community_rcl.txt/cis_mysql5-6_enterprise_rcl.txt/cis_rhel5_linux_rcl.txt/cis_rhel6_linux_rcl.txt/cis_rhel7_linux_rcl.txt/cis_rhel_linux_rcl.txt/cis_sles11_linux_rcl.txt/cis_sles12_linux_rcl.txt/cis_solaris11_rcl.txt/cis_win10_enterprise_L1_rcl.txt/cis_win10_enterprise_L2_rcl.txt/cis_win2012r2_domainL1_rcl.txt/cis_win2012r2_domainL2_rcl.txt/cis_win2012r2_memberL1_rcl.txt/cis_win2012r2_memberL2_rcl.txt/cis_win2016_domainL1_rcl.txt/cis_win2016_domainL2_rcl.txt/cis_win2016_memberL1_rcl.txt/cis_win2016_memberL2_rcl.txt/rootkit_files.txt/rootkit_trojans.txt/system_audit_pw.txt/system_audit_rcl.txt/system_audit_ssh.txt/win_applications_rcl.txt/win_audit_rcl.txt/win_malware_rcl.txt


dirname: /usr/share/ossec/contrib/ossec-testing/tests
filetypes: ffffffffffffffffffffffffffffffffffffff
filenames:
  apache.ini/apparmor.ini/asterisk.ini/cimserver.ini/cisco_ios.ini/cpanel.ini/dnsmasq.ini/doas.ini/dovecot.ini/dpkg.ini/dropbear.ini/exim.ini/firewalld.ini/mailscanner.ini/modsecurity.ini/named.ini/netscreen.ini/nginx.ini/openbsd-dhcpd.ini/openbsd-httpd.ini/openbsd.ini/opensmtpd.ini/ossec.ini/pam.ini/postfix.ini/proftpd.ini/rsh.ini/samba.ini/sshd.ini/su.ini/sudo.ini/syslog.ini/sysmon.ini/systemd.ini/unbound.ini/vsftpd.ini/web_appsec.ini/web_rules.ini


dirname: /var/ossec/rules/translated/pure_ftpd
filetypes: ffffffffffffff
filenames:
  pure-ftpd_rules_da.xml/pure-ftpd_rules_de.xml/pure-ftpd_rules_en.xml/pure-ftpd_rules_es.xml/pure-ftpd_rules_fr.xml/pure-ftpd_rules_fr_funny.xml/pure-ftpd_rules_it.xml/pure-ftpd_rules_nl.xml/pure-ftpd_rules_no.xml/pure-ftpd_rules_pt_br.xml/pure-ftpd_rules_ro.xml/pure-ftpd_rules_sk.xml/pure-ftpd_rules_sv.xml/pure-ftpd_rules_tr.xml


dirname: /usr/share/ossec/contrib/debian-packages/ossec-hids/debian
filetypes: ffffffdffffdf
filenames:
  changelog/compat/conffiles/control/copyright/ossec-hids.lintian-overrides/patches/postinst/postrm/preinst/rules/source/templates


dirname: /usr/share/ossec/contrib/debian-packages/ossec-hids-agent/debian
filetypes: ffffffdffffdf
filenames:
  changelog/compat/conffiles/control/copyright/ossec-hids-agent.lintian-overrides/patches/postinst/postrm/preinst/rules/source/templates


dirname: /usr/share/ossec/contrib
filetypes: fffffdfdfffffdffffffffffffdddfff
filenames:
  active-list.pl/add_localfile.sh/compile_alerts.pl/compile_alerts.txt/config2xml/debian-packages/iis-logs.bat/logtesting/mysql.schema/ossec-batch-manager.pl/ossec-configure/ossec-eps.sh/ossec-pcre2-config.pl/ossec-testing/ossec2mysql.conf/ossec2mysql.pl/ossec2mysql.sql/ossec2mysqld.pl/ossec2rss.php/ossec_report.txt/ossec_report_contrib.pl/ossecmysql.pm/ossectop.pl/postgresql.schema/rename_agent.sh/renumber_agent.sh/selinux/snapcraft/specs/util.sh/version_bump.sh/zeromq_pubsub.py


dirname: /usr/share/ossec/contrib/logtesting
filetypes: ddddddddddddddddddddddddddddddddddddddddddddf
filenames:
  1/10/11/12/13/14/15/16/17/18/19/2/20/21/22/23/24/25/26/27/28/29/3/30/31/32/33/34/35/36/37/38/39/4/40/41/42/43/44/5/6/7/8/9/dotests.sh


dirname: /var/ossec/rules
filetypes: fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffff
filenames:
  apache_rules.xml/apparmor_rules.xml/arpwatch_rules.xml/asterisk_rules.xml/attack_rules.xml/cimserver_rules.xml/cisco-ios_rules.xml/clam_av_rules.xml/courier_rules.xml/dnsmasq_rules.xml/dovecot_rules.xml/dropbear_rules.xml/exclusion_rules.xml/exim_rules.xml/firewall_rules.xml/firewalld_rules.xml/ftpd_rules.xml/hordeimp_rules.xml/ids_rules.xml/imapd_rules.xml/kesl_rules.xml/last_rootlogin_rules.xml/lighttpd_rules.xml/linux_usbdetect_rules.xml/local_rules.xml/mailscanner_rules.xml/mcafee_av_rules.xml/mhn_cowrie_rules.xml/mhn_dionaea_rules.xml/ms-exchange_rules.xml/ms-se_rules.xml/ms1016_usbdetect_rules.xml/ms_dhcp_rules.xml/ms_firewall_rules.xml/ms_ftpd_rules.xml/ms_ipsec_rules.xml/ms_powershell_rules.xml/msauth_rules.xml/mysql_rules.xml/named_rules.xml/netscreenfw_rules.xml/nginx_rules.xml/nsd_rules.xml/openbsd-dhcpd_rules.xml/openbsd_rules.xml/opensmtpd_rules.xml/ossec_rules.xml/owncloud_rules.xml/pam_rules.xml/php_rules.xml/pix_rules.xml/policy_rules.xml/postfix_rules.xml/postgresql_rules.xml/proftpd_rules.xml/proxmox-ve_rules.xml/psad_rules.xml/pure-ftpd_rules.xml/racoon_rules.xml/roundcube_rules.xml/rules_config.xml/sendmail_rules.xml/smbd_rules.xml/solaris_bsm_rules.xml/sonicwall_rules.xml/spamd_rules.xml/squid_rules.xml/sshd_rules.xml/symantec-av_rules.xml/symantec-ws_rules.xml/syslog_rules.xml/sysmon_rules.xml/systemd_rules.xml/telnetd_rules.xml/topleveldomain_rules.xml/translated/trend-osce_rules.xml/unbound_rules.xml/vmpop3d_rules.xml/vmware_rules.xml/vpn_concentrator_rules.xml/vpopmail_rules.xml/vsftpd_rules.xml/web_appsec_rules.xml/web_rules.xml/wordpress_rules.xml/zeus_rules.xml


dirname: /var/ossec/bin
filetypes: fffffffffffffffffffffff
filenames:
  agent_control/clear_stats/list_agents/manage_agents/ossec-agentlessd/ossec-analysisd/ossec-authd/ossec-csyslogd/ossec-execd/ossec-logcollector/ossec-logtest/ossec-maild/ossec-makelists/ossec-monitord/ossec-regex/ossec-remoted/ossec-reportd/ossec-server.sh/ossec-syscheckd/rootcheck_control/syscheck_control/syscheck_update/verify-agent-conf


