@dir(,ossec,550) %%OSSEC_HOME%% @dir(,ossec,550) %%OSSEC_HOME%%/active-response @dir(,ossec,550) %%OSSEC_HOME%%/active-response/bin @(,ossec,550) %%OSSEC_HOME%%/active-response/bin/merge-config.sh @dir(,,550) %%OSSEC_HOME%%/bin @dir(,,550) %%OSSEC_HOME%%/bin/command @(,,550) %%OSSEC_HOME%%/bin/command/last-logins.sh @(,,550) %%OSSEC_HOME%%/bin/command/open-ports.sh @dir(,,550) %%OSSEC_HOME%%/bin/config @(,,550) %%OSSEC_HOME%%/bin/config/agent-conf @(,,550) %%OSSEC_HOME%%/bin/config/ossec-conf @dir(,ossec,550) %%OSSEC_HOME%%/etc @dir(,ossec,550) %%OSSEC_HOME%%/etc/agent.conf.d @(,ossec,640) %%OSSEC_HOME%%/etc/agent.conf.d/120.rootcheck.conf @(,ossec,640) %%OSSEC_HOME%%/etc/agent.conf.d/130.syscheck.conf @(,ossec,640) %%OSSEC_HOME%%/etc/agent.conf.d/150.logs.conf @dir(,ossec,550) %%OSSEC_HOME%%/etc/agent.conf.d/disabled @(,ossec,640) %%OSSEC_HOME%%/etc/agent.conf.d/disabled/520.rootcheck.local.conf @(,ossec,640) %%OSSEC_HOME%%/etc/agent.conf.d/disabled/530.syscheck.local.conf @(,ossec,640) %%OSSEC_HOME%%/etc/agent.conf.d/disabled/550.logs.local.conf @sample(,ossec,640) %%OSSEC_HOME%%/etc/command.conf.sample @dir(,ossec,550) %%OSSEC_HOME%%/etc/ossec.conf.d @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/100.rules.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/110.active-response.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/120.rootcheck.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/130.syscheck.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/140.command-output.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/150.logs.conf @sample(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/900.local.conf.sample @dir(,ossec,550) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/500.rules.local.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/510.active-response.local.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/520.rootcheck.local.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/530.syscheck.local.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/540.command-output.local.conf @(,ossec,640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/550.logs.local.conf @dir(,ossec,550) %%OSSEC_HOME%%/rules @(,ossec,640) %%OSSEC_HOME%%/rules/freebsd_cmdout_rules.xml @(,ossec,640) %%OSSEC_HOME%%/rules/freebsd_config_rules.xml