# filelist

dirname: /opt/nessus_agent/lib/nessus
filetypes: fffffffd
filenames:
  libjemalloc.a/libjemalloc.la/libjemalloc.so/libjemalloc.so.7/libjemalloc.so.7.5.1/libnessus-glibc-fix.so/libnessus-glibc-fix.so.1/plugins


dirname: /var/ossec/active-response/bin
filetypes: ffffff
filenames:
  active-response_linux_iptables.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/info.txt


dirname: /var/ossec/active-response/bin
filetypes: fffffffff
filenames:
  active-response_linux_iptables.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/ar_linux_fix_wazuh.sh/ar_linux_quarantine.sh/ar_linux_update_package.sh/info.txt


dirname: /usr/share/osquery/packs
filetypes: ffffffffff
filenames:
  hardware-monitoring.conf/incident-response.conf/it-compliance.conf/osquery-monitoring.conf/ossec-rootkit.conf/osx-attacks.conf/unwanted-chrome-extensions.conf/vuln-management.conf/windows-attacks.conf/windows-hardening.conf


dirname: /usr/share/osquery/lenses
filenames:
  COPYING/access.aug/activemq_conf.aug/activemq_xml.aug/afs_cellalias.aug/aliases.aug/anacron.aug/approx.aug/apt_update_manager.aug/aptcacherngsecurity.aug/aptconf.aug/aptpreferences.aug/aptsources.aug/authorized_keys.aug/automaster.aug/automounter.aug/avahi.aug/backuppchosts.aug/bbhosts.aug/bootconf.aug/build.aug/cachefilesd.aug/carbon.aug/ceph.aug/cgconfig.aug/cgrules.aug/channels.aug/chrony.aug/clamav.aug/cobblermodules.aug/cobblersettings.aug/collectd.aug/cpanel.aug/cron.aug/cron_user.aug/crypttab.aug/csv.aug/cups.aug/cyrus_imapd.aug/darkice.aug/debctrl.aug/desktop.aug/device_map.aug/dhclient.aug/dhcpd.aug/dns_zone.aug/dnsmasq.aug/dovecot.aug/dpkg.aug/dput.aug/erlang.aug/ethers.aug/exports.aug/fai_diskconfig.aug/fonts.aug/fstab.aug/fuse.aug/gdm.aug/getcap.aug/group.aug/grub.aug/gshadow.aug/gtkbookmarks.aug/host_conf.aug/hostname.aug/hosts.aug/hosts_access.aug/htpasswd.aug/httpd.aug/inetd.aug/inifile.aug/inittab.aug/inputrc.aug/interfaces.aug/iproute2.aug/iptables.aug/iscsid.aug/jaas.aug/jettyrealm.aug/jmxaccess.aug/jmxpassword.aug/json.aug/kdump.aug/keepalived.aug/known_hosts.aug/koji.aug/krb5.aug/ldif.aug/ldso.aug/lightdm.aug/limits.aug/login_defs.aug/logrotate.aug/logwatch.aug/lokkit.aug/lvm.aug/mailscanner.aug/mailscanner_rules.aug/masterpasswd.aug/mcollective.aug/mdadm_conf.aug/memcached.aug/mke2fs.aug/modprobe.aug/modules.aug/modules_conf.aug/mongodbserver.aug/monit.aug/multipath.aug/mysql.aug/nagioscfg.aug/nagiosobjects.aug/netmasks.aug/networkmanager.aug/networks.aug/nginx.aug/nrpe.aug/nslcd.aug/nsswitch.aug/ntp.aug/ntpd.aug/odbc.aug/opendkim.aug/openshift_config.aug/openshift_http.aug/openshift_quickstarts.aug/openvpn.aug/oz.aug/pagekite.aug/pam.aug/pamconf.aug/passwd.aug/pbuilder.aug/pg_hba.aug/pgbouncer.aug/php.aug/phpvars.aug/postfix_access.aug/postfix_main.aug/postfix_master.aug/postfix_passwordmap.aug/postfix_sasl_smtpd.aug/postfix_transport.aug/postfix_virtual.aug/postgresql.aug/properties.aug/protocols.aug/puppet.aug/puppet_auth.aug/puppetfile.aug/puppetfileserver.aug/pylonspaste.aug/pythonpaste.aug/qpid.aug/quote.aug/rabbitmq.aug/radicale.aug/redis.aug/reprepro_uploaders.aug/resolv.aug/rhsm.aug/rmt.aug/rsyncd.aug/rsyslog.aug/rtadvd.aug/rx.aug/samba.aug/schroot.aug/securetty.aug/sep.aug/services.aug/shadow.aug/shells.aug/shellvars.aug/shellvars_list.aug/simplelines.aug/simplevars.aug/sip_conf.aug/slapd.aug/smbusers.aug/solaris_system.aug/soma.aug/spacevars.aug/splunk.aug/squid.aug/ssh.aug/sshd.aug/sssd.aug/star.aug/stunnel.aug/subversion.aug/sudoers.aug/sysconfig.aug/sysconfig_route.aug/sysctl.aug/syslog.aug/systemd.aug/termcap.aug/thttpd.aug/tmpfiles.aug/trapperkeeper.aug/tuned.aug/up2date.aug/updatedb.aug/util.aug/vfstab.aug/vmware_config.aug/vsftpd.aug/webmin.aug/wine.aug/xendconfsxp.aug/xinetd.aug/xml.aug/xorg.aug/xymon.aug/xymon_alerting.aug/yaml.aug/yum.aug

filetypes:
  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff


dirname: /opt/threat-monitoring/nids/config
filetypes: ffff
filenames:
  threat-monitoring-nids.service.default/ukfast_rules.yaml.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /opt/threat-monitoring/nids/config
filetypes: fffff
filenames:
  threat-monitoring-nids.service.default/ukfast_rules.yaml.default/ukfast_suricata.options.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /opt/threat-monitoring/nids/config/default
filetypes: ffffff
filenames:
  threat-monitoring-nids-rotate.default/threat-monitoring-nids.service.default/ukfast_rules.yaml.default/ukfast_suricata.options.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /opt/threat-monitoring/nids/config
filetypes: fffff
filenames:
  threat-monitoring-nids.service-rhel.default/ukfast_rules.yaml.default/ukfast_suricata.options.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /var/ossec/active-response/bin
filetypes: fffffffffffff
filenames:
  active-response_linux_iptables.sh/active-response_linux_nessusd-fix.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/ar_linux_fix_wazuh.sh/ar_linux_nessus_link.sh/ar_linux_patches.sh/ar_linux_quarantine.sh/ar_linux_update_package.sh/ar_update.sh/info.txt


dirname: /var/ossec/active-response/bin
filetypes: ffffffffffdf
filenames:
  active-response_linux_iptables.sh/active-response_linux_nessusd-fix.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/ar_linux_fix_wazuh.sh/ar_linux_patches.sh/ar_linux_quarantine.sh/ar_linux_update_package.sh/artifacts/info.txt


dirname: /var/ossec/active-response/bin
filetypes: ffffffffffff
filenames:
  active-response_linux_iptables.sh/active-response_linux_nessusd-fix.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/ar_linux_fix_wazuh.sh/ar_linux_nessus_link.sh/ar_linux_patches.sh/ar_linux_quarantine.sh/ar_linux_update_package.sh/info.txt


dirname: /opt/threat-vision/surveillance/nids/config/default
filetypes: ffffff
filenames:
  threat-surveillance-nids-rotate.default/threat-surveillance-nids.service.default/ukfast_rules.yaml.default/ukfast_suricata.options.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic/localfile-logs
filetypes: ffffff
filenames:
  apache-logs.template/audit-logs.template/ossec-logs.template/pgsql-logs.template/snort-logs.template/syslog-logs.template


dirname: /var/ossec/etc
filetypes: ffffffdf
filenames:
  client.keys/internal_options.conf/local_internal_options.conf/localtime/ossec-init.conf/ossec.conf/shared/wpk_root.pem


dirname: /var/ossec/wodles/oscap/content
filetypes: fffffff
filenames:
  cve-redhat-6-ds.xml/cve-redhat-7-ds.xml/ssg-centos-6-ds.xml/ssg-centos-7-ds.xml/ssg-fedora-24-ds.xml/ssg-rhel-6-ds.xml/ssg-rhel-7-ds.xml


dirname: /var/ossec/etc/shared
filetypes: fffffffffffffffffffff
filenames:
  cis_apache2224_rcl.txt/cis_debian_linux_rcl.txt/cis_mysql5-6_community_rcl.txt/cis_mysql5-6_enterprise_rcl.txt/cis_rhel5_linux_rcl.txt/cis_rhel6_linux_rcl.txt/cis_rhel7_linux_rcl.txt/cis_rhel_linux_rcl.txt/cis_sles11_linux_rcl.txt/cis_sles12_linux_rcl.txt/cis_win2012r2_domainL1_rcl.txt/cis_win2012r2_domainL2_rcl.txt/cis_win2012r2_memberL1_rcl.txt/cis_win2012r2_memberL2_rcl.txt/rootkit_files.txt/rootkit_trojans.txt/system_audit_rcl.txt/system_audit_ssh.txt/win_applications_rcl.txt/win_audit_rcl.txt/win_malware_rcl.txt


dirname: /var/ossec/tmp/sca-3.11.4-1-tmp/windows
filetypes: fffffff
filenames:
  cis_win10_enterprise_L1.yml/cis_win10_enterprise_L2.yml/cis_win2012r2_domainL1.yml/cis_win2012r2_domainL2.yml/cis_win2012r2_memberL1.yml/cis_win2012r2_memberL2.yml/sca_win_audit.yml


dirname: /var/ossec/packages_files/agent_installation_scripts/src/init
filetypes: fffffffffffffffffff
filenames:
  adduser.sh/darwin-init.sh/dist-detect.sh/functions.sh/fw-check.sh/init.sh/inst-functions.sh/language.sh/ossec-client.sh/ossec-hids-suse.init/ossec-local.sh/ossec-server.sh/osx105-addusers.sh/pkg_installer.sh/register_configure_agent.sh/replace_manager_ip.sh/shared.sh/template-select.sh/update.sh


dirname: /var/ossec/active-response/bin
filetypes: fffffffffffffffff
filenames:
  default-firewall-drop.sh/disable-account.sh/firewall-drop.sh/firewalld-drop.sh/host-deny.sh/ip-customblock.sh/ipfw.sh/ipfw_mac.sh/kaspersky.py/kaspersky.sh/npf.sh/ossec-slack.sh/ossec-tweeter.sh/pf.sh/restart-ossec.sh/restart.sh/route-null.sh


dirname: /var/ossec/tmp/sca-3.11.4-1-tmp/debian
filetypes: dddfffffff
filenames:
  7/8/9/cis_debian7_L1.yml/cis_debian7_L2.yml/cis_debian8_L1.yml/cis_debian8_L2.yml/cis_debian9_L1.yml/cis_debian9_L2.yml/sca.files


dirname: /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic
filetypes: fffffffffdfffffffffffffff
filenames:
  alerts.template/ar-commands.template/ar-definitions.template/auth.template/cluster.template/global-ar.template/global.template/header-comments.template/localfile-commands.template/localfile-logs/logging.template/osquery.template/remote-secure.template/rootcheck.agent.template/rootcheck.manager.template/rules.template/sca.files/sca.manager.files/sca.template/syscheck.agent.template/syscheck.manager.template/wodle-ciscat.template/wodle-openscap.template/wodle-syscollector.template/wodle-vulnerability-detector.manager.template


dirname: /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/centos/6
filetypes: fffff
filenames:
  openscap.files/rootcheck.agent.template/rootcheck.manager.template/sca.files/wodle-openscap.template


dirname: /var/ossec/agentless
filetypes: ffffffffffff
filenames:
  main.exp/register_host.sh/ssh.exp/ssh_asa-fwsmconfig_diff/ssh_foundry_diff/ssh_generic_diff/ssh_integrity_check_bsd/ssh_integrity_check_linux/ssh_nopass.exp/ssh_pixconfig_diff/sshlogin.exp/su.exp


dirname: /var/ossec/bin
filetypes: fffffffff
filenames:
  agent-auth/manage_agents/ossec-agentd/ossec-control/ossec-execd/ossec-logcollector/ossec-syscheckd/util.sh/wazuh-modulesd


