# filelist

dirname: /opt/nessus_agent/lib/nessus/iconv
filenames:
  _tbl_simple.so/adobe-stdenc.so/adobe-symbol.so/adobe-zdingbats.so/big5.so/cns11643-plane1.so/cns11643-plane14.so/cns11643-plane2.so/cp037.so/cp038.so/cp10000.so/cp10006.so/cp10007.so/cp10029.so/cp1006.so/cp10079.so/cp10081.so/cp1026.so/cp273.so/cp274.so/cp275.so/cp277.so/cp278.so/cp280.so/cp281.so/cp284.so/cp285.so/cp290.so/cp297.so/cp420.so/cp423.so/cp424.so/cp437.so/cp500.so/cp737.so/cp775.so/cp850.so/cp851.so/cp852.so/cp855.so/cp856.so/cp857.so/cp860.so/cp861.so/cp862.so/cp863.so/cp864.so/cp865.so/cp866.so/cp868.so/cp869.so/cp870.so/cp871.so/cp874.so/cp875.so/cp880.so/cp891.so/cp903.so/cp904.so/cp905.so/cp918.so/cp932.so/cp936.so/cp949.so/cp950.so/dec-mcs.so/ebcdic-at-de-a.so/ebcdic-at-de.so/ebcdic-ca-fr.so/ebcdic-dk-no-a.so/ebcdic-dk-no.so/ebcdic-es-a.so/ebcdic-es-s.so/ebcdic-es.so/ebcdic-fi-se-a.so/ebcdic-fi-se.so/ebcdic-fr.so/ebcdic-it.so/ebcdic-pt.so/ebcdic-uk.so/ebcdic-us.so/euc-jp.so/euc-kr.so/euc-tw.so/gb12345.so/gb2312.so/gb_2312-80.so/hp-roman8.so/iso-10646-ucs-2.so/iso-10646-ucs-4.so/iso-2022-cn.so/iso-2022-jp-2.so/iso-2022-jp.so/iso-2022-kr.so/iso-8859-1.so/iso-8859-10.so/iso-8859-13.so/iso-8859-14.so/iso-8859-15.so/iso-8859-2.so/iso-8859-3.so/iso-8859-4.so/iso-8859-5.so/iso-8859-6.so/iso-8859-7.so/iso-8859-8.so/iso-8859-9.so/iso-ir-10.so/iso-ir-102.so/iso-ir-103.so/iso-ir-11.so/iso-ir-111.so/iso-ir-121.so/iso-ir-122.so/iso-ir-123.so/iso-ir-128.so/iso-ir-13.so/iso-ir-139.so/iso-ir-14.so/iso-ir-141.so/iso-ir-142.so/iso-ir-143.so/iso-ir-146.so/iso-ir-147.so/iso-ir-15.so/iso-ir-150.so/iso-ir-151.so/iso-ir-152.so/iso-ir-153.so/iso-ir-154.so/iso-ir-155.so/iso-ir-158.so/iso-ir-16.so/iso-ir-17.so/iso-ir-18.so/iso-ir-19.so/iso-ir-2.so/iso-ir-21.so/iso-ir-25.so/iso-ir-27.so/iso-ir-37.so/iso-ir-4.so/iso-ir-47.so/iso-ir-49.so/iso-ir-50.so/iso-ir-51.so/iso-ir-54.so/iso-ir-55.so/iso-ir-57.so/iso-ir-60.so/iso-ir-61.so/iso-ir-69.so/iso-ir-70.so/iso-ir-8-1.so/iso-ir-8-2.so/iso-ir-84.so/iso-ir-85.so/iso-ir-86.so/iso-ir-88.so/iso-ir-89.so/iso-ir-9-1.so/iso-ir-9-2.so/iso-ir-90.so/iso-ir-91.so/iso-ir-92.so/iso-ir-93.so/iso-ir-94.so/iso-ir-95.so/iso-ir-96.so/iso-ir-98.so/iso-ir-99.so/iso646-dk.so/iso646-kr.so/jis_x0201.so/jis_x0208-1983.so/jis_x0212-1990.so/johab.so/koi8-r.so/koi8-ru.so/koi8-u.so/ksx1001.so/mac-ce.so/mac-croatian.so/mac-cyrillic.so/mac-dingbats.so/mac-greek.so/mac-iceland.so/mac-japan.so/mac-roman.so/mac-romania.so/mac-thai.so/mac-turkish.so/mac-ukraine.so/macintosh.so/osd_ebcdic_df04_1.so/osd_ebcdic_df04_15.so/shift_jis.so/ucs2-internal.so/ucs4-internal.so/unicode-1-1-utf-7.so/us-ascii.so/utf-16.so/utf-8.so/windows-1250.so/windows-1251.so/windows-1252.so/windows-1253.so/windows-1254.so/windows-1255.so/windows-1256.so/windows-1257.so/windows-1258.so

filetypes:
  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff


dirname: /opt/nessus_agent/var/nessus
filetypes: dfffffddd
filenames:
  logs/nessus-services/nessus_org.pem/plugins-core.tar.gz/tenable-plugins-a-20210201.pem/tenable-plugins-b-20210201.pem/tmp/tools/users


dirname: /var/ossec/active-response/bin
filetypes: ffffff
filenames:
  active-response_linux_iptables.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/info.txt


dirname: /var/ossec/active-response/bin
filetypes: fffffffff
filenames:
  active-response_linux_iptables.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/ar_linux_fix_wazuh.sh/ar_linux_quarantine.sh/ar_linux_update_package.sh/info.txt


dirname: /usr/lib64
filetypes: ffffffffff
filenames:
  libevent-2.0.so.5/libevent-2.0.so.5.1.9/libevent_core-2.0.so.5/libevent_core-2.0.so.5.1.9/libevent_extra-2.0.so.5/libevent_extra-2.0.so.5.1.9/libevent_openssl-2.0.so.5/libevent_openssl-2.0.so.5.1.9/libevent_pthreads-2.0.so.5/libevent_pthreads-2.0.so.5.1.9


dirname: /usr/lib64
filetypes: ffffffff
filenames:
  .libhogweed.so.2.5.hmac/.libhogweed.so.2.hmac/.libnettle.so.4.7.hmac/.libnettle.so.4.hmac/libhogweed.so.2/libhogweed.so.2.5/libnettle.so.4/libnettle.so.4.7


dirname: /usr/share/osquery/packs
filetypes: ffffffffff
filenames:
  hardware-monitoring.conf/incident-response.conf/it-compliance.conf/osquery-monitoring.conf/ossec-rootkit.conf/osx-attacks.conf/unwanted-chrome-extensions.conf/vuln-management.conf/windows-attacks.conf/windows-hardening.conf


dirname: /usr/share/osquery/lenses
filenames:
  COPYING/access.aug/activemq_conf.aug/activemq_xml.aug/afs_cellalias.aug/aliases.aug/anacron.aug/approx.aug/apt_update_manager.aug/aptcacherngsecurity.aug/aptconf.aug/aptpreferences.aug/aptsources.aug/authorized_keys.aug/automaster.aug/automounter.aug/avahi.aug/backuppchosts.aug/bbhosts.aug/bootconf.aug/build.aug/cachefilesd.aug/carbon.aug/ceph.aug/cgconfig.aug/cgrules.aug/channels.aug/chrony.aug/clamav.aug/cobblermodules.aug/cobblersettings.aug/collectd.aug/cpanel.aug/cron.aug/cron_user.aug/crypttab.aug/csv.aug/cups.aug/cyrus_imapd.aug/darkice.aug/debctrl.aug/desktop.aug/device_map.aug/dhclient.aug/dhcpd.aug/dns_zone.aug/dnsmasq.aug/dovecot.aug/dpkg.aug/dput.aug/erlang.aug/ethers.aug/exports.aug/fai_diskconfig.aug/fonts.aug/fstab.aug/fuse.aug/gdm.aug/getcap.aug/group.aug/grub.aug/gshadow.aug/gtkbookmarks.aug/host_conf.aug/hostname.aug/hosts.aug/hosts_access.aug/htpasswd.aug/httpd.aug/inetd.aug/inifile.aug/inittab.aug/inputrc.aug/interfaces.aug/iproute2.aug/iptables.aug/iscsid.aug/jaas.aug/jettyrealm.aug/jmxaccess.aug/jmxpassword.aug/json.aug/kdump.aug/keepalived.aug/known_hosts.aug/koji.aug/krb5.aug/ldif.aug/ldso.aug/lightdm.aug/limits.aug/login_defs.aug/logrotate.aug/logwatch.aug/lokkit.aug/lvm.aug/mailscanner.aug/mailscanner_rules.aug/masterpasswd.aug/mcollective.aug/mdadm_conf.aug/memcached.aug/mke2fs.aug/modprobe.aug/modules.aug/modules_conf.aug/mongodbserver.aug/monit.aug/multipath.aug/mysql.aug/nagioscfg.aug/nagiosobjects.aug/netmasks.aug/networkmanager.aug/networks.aug/nginx.aug/nrpe.aug/nslcd.aug/nsswitch.aug/ntp.aug/ntpd.aug/odbc.aug/opendkim.aug/openshift_config.aug/openshift_http.aug/openshift_quickstarts.aug/openvpn.aug/oz.aug/pagekite.aug/pam.aug/pamconf.aug/passwd.aug/pbuilder.aug/pg_hba.aug/pgbouncer.aug/php.aug/phpvars.aug/postfix_access.aug/postfix_main.aug/postfix_master.aug/postfix_passwordmap.aug/postfix_sasl_smtpd.aug/postfix_transport.aug/postfix_virtual.aug/postgresql.aug/properties.aug/protocols.aug/puppet.aug/puppet_auth.aug/puppetfile.aug/puppetfileserver.aug/pylonspaste.aug/pythonpaste.aug/qpid.aug/quote.aug/rabbitmq.aug/radicale.aug/redis.aug/reprepro_uploaders.aug/resolv.aug/rhsm.aug/rmt.aug/rsyncd.aug/rsyslog.aug/rtadvd.aug/rx.aug/samba.aug/schroot.aug/securetty.aug/sep.aug/services.aug/shadow.aug/shells.aug/shellvars.aug/shellvars_list.aug/simplelines.aug/simplevars.aug/sip_conf.aug/slapd.aug/smbusers.aug/solaris_system.aug/soma.aug/spacevars.aug/splunk.aug/squid.aug/ssh.aug/sshd.aug/sssd.aug/star.aug/stunnel.aug/subversion.aug/sudoers.aug/sysconfig.aug/sysconfig_route.aug/sysctl.aug/syslog.aug/systemd.aug/termcap.aug/thttpd.aug/tmpfiles.aug/trapperkeeper.aug/tuned.aug/up2date.aug/updatedb.aug/util.aug/vfstab.aug/vmware_config.aug/vsftpd.aug/webmin.aug/wine.aug/xendconfsxp.aug/xinetd.aug/xml.aug/xorg.aug/xymon.aug/xymon_alerting.aug/yaml.aug/yum.aug

filetypes:
  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff


dirname: /usr/share/suricata/rules
filetypes: fffffffffffffff
filenames:
  app-layer-events.rules/decoder-events.rules/dnp3-events.rules/dns-events.rules/files.rules/http-events.rules/ipsec-events.rules/kerberos-events.rules/modbus-events.rules/nfs-events.rules/ntp-events.rules/smb-events.rules/smtp-events.rules/stream-events.rules/tls-events.rules


dirname: /usr/lib/python2.7/site-packages/suricata/update/commands
filetypes: ffffffffffffffffffffffff
filenames:
  __init__.py/__init__.pyc/__init__.pyo/addsource.py/addsource.pyc/addsource.pyo/disablesource.py/disablesource.pyc/disablesource.pyo/enablesource.py/enablesource.pyc/enablesource.pyo/listenabledsources.py/listenabledsources.pyc/listenabledsources.pyo/listsources.py/listsources.pyc/listsources.pyo/removesource.py/removesource.pyc/removesource.pyo/updatesources.py/updatesources.pyc/updatesources.pyo


dirname: /usr/lib/python2.7/site-packages/suricata/update/configs
filetypes: fffffffff
filenames:
  __init__.py/__init__.pyc/__init__.pyo/disable.conf/drop.conf/enable.conf/modify.conf/threshold.in/update.yaml


dirname: /usr/lib/python2.7/site-packages/suricata/update
filetypes: fffddfffddffffffffffffffffffffffffffffffffffff
filenames:
  __init__.py/__init__.pyc/__init__.pyo/commands/compat/config.py/config.pyc/config.pyo/configs/data/engine.py/engine.pyc/engine.pyo/exceptions.py/exceptions.pyc/exceptions.pyo/extract.py/extract.pyc/extract.pyo/loghandler.py/loghandler.pyc/loghandler.pyo/main.py/main.pyc/main.pyo/maps.py/maps.pyc/maps.pyo/net.py/net.pyc/net.pyo/notes.py/notes.pyc/notes.pyo/rule.py/rule.pyc/rule.pyo/sources.py/sources.pyc/sources.pyo/util.py/util.pyc/util.pyo/version.py/version.pyc/version.pyo


dirname: /usr/lib/python2.7/site-packages/suricata/ctl
filetypes: fffffffffffffff
filenames:
  __init__.py/__init__.pyc/__init__.pyo/filestore.py/filestore.pyc/filestore.pyo/loghandler.py/loghandler.pyc/loghandler.pyo/main.py/main.pyc/main.pyo/test_filestore.py/test_filestore.pyc/test_filestore.pyo


dirname: /opt/threat-monitoring/nids/config
filetypes: ffffff
filenames:
  threat-monitoring-nids.service.default/ukfast_rules.yaml/ukfast_rules.yaml.default/ukfast_suricata.yaml/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /opt/threat-monitoring/nids/config
filetypes: ffff
filenames:
  threat-monitoring-nids.service.default/ukfast_rules.yaml.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /opt/threat-monitoring/nids/config
filetypes: fffff
filenames:
  threat-monitoring-nids.service.default/ukfast_rules.yaml.default/ukfast_suricata.options.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /opt/threat-monitoring/nids/config/default
filetypes: ffffff
filenames:
  threat-monitoring-nids-rotate.default/threat-monitoring-nids.service.default/ukfast_rules.yaml.default/ukfast_suricata.options.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /opt/threat-monitoring/nids/config
filetypes: fffff
filenames:
  threat-monitoring-nids.service-rhel.default/ukfast_rules.yaml.default/ukfast_suricata.options.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /var/ossec/active-response/bin
filetypes: fffffffffffff
filenames:
  active-response_linux_iptables.sh/active-response_linux_nessusd-fix.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/ar_linux_fix_wazuh.sh/ar_linux_nessus_link.sh/ar_linux_patches.sh/ar_linux_quarantine.sh/ar_linux_update_package.sh/ar_update.sh/info.txt


dirname: /var/ossec/active-response/bin
filetypes: ffffffffffdf
filenames:
  active-response_linux_iptables.sh/active-response_linux_nessusd-fix.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/ar_linux_fix_wazuh.sh/ar_linux_patches.sh/ar_linux_quarantine.sh/ar_linux_update_package.sh/artifacts/info.txt


dirname: /var/ossec/active-response/bin
filetypes: ffffffffffff
filenames:
  active-response_linux_iptables.sh/active-response_linux_nessusd-fix.sh/active-response_linux_restart_ossec.sh/ar_iptables-ip.sh/ar_legacy-restart-ossec.sh/ar_legacy_iptables-ip.sh/ar_linux_fix_wazuh.sh/ar_linux_nessus_link.sh/ar_linux_patches.sh/ar_linux_quarantine.sh/ar_linux_update_package.sh/info.txt


dirname: /opt/threat-vision/surveillance/nids/config/default
filetypes: ffffff
filenames:
  threat-surveillance-nids-rotate.default/threat-surveillance-nids.service.default/ukfast_rules.yaml.default/ukfast_suricata.options.default/ukfast_suricata.yaml.default/ukfast_update_rules.config.default


dirname: /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic/localfile-logs
filetypes: ffffff
filenames:
  apache-logs.template/audit-logs.template/ossec-logs.template/pgsql-logs.template/snort-logs.template/syslog-logs.template


dirname: /var/ossec/etc
filetypes: ffffffdf
filenames:
  client.keys/internal_options.conf/local_internal_options.conf/localtime/ossec-init.conf/ossec.conf/shared/wpk_root.pem


dirname: /var/ossec/wodles/oscap/content
filetypes: fffffff
filenames:
  cve-redhat-6-ds.xml/cve-redhat-7-ds.xml/ssg-centos-6-ds.xml/ssg-centos-7-ds.xml/ssg-fedora-24-ds.xml/ssg-rhel-6-ds.xml/ssg-rhel-7-ds.xml


dirname: /var/ossec/etc/shared
filetypes: fffffffffffffffffffff
filenames:
  cis_apache2224_rcl.txt/cis_debian_linux_rcl.txt/cis_mysql5-6_community_rcl.txt/cis_mysql5-6_enterprise_rcl.txt/cis_rhel5_linux_rcl.txt/cis_rhel6_linux_rcl.txt/cis_rhel7_linux_rcl.txt/cis_rhel_linux_rcl.txt/cis_sles11_linux_rcl.txt/cis_sles12_linux_rcl.txt/cis_win2012r2_domainL1_rcl.txt/cis_win2012r2_domainL2_rcl.txt/cis_win2012r2_memberL1_rcl.txt/cis_win2012r2_memberL2_rcl.txt/rootkit_files.txt/rootkit_trojans.txt/system_audit_rcl.txt/system_audit_ssh.txt/win_applications_rcl.txt/win_audit_rcl.txt/win_malware_rcl.txt


dirname: /var/ossec/tmp/sca-3.11.4-1-tmp/windows
filetypes: fffffff
filenames:
  cis_win10_enterprise_L1.yml/cis_win10_enterprise_L2.yml/cis_win2012r2_domainL1.yml/cis_win2012r2_domainL2.yml/cis_win2012r2_memberL1.yml/cis_win2012r2_memberL2.yml/sca_win_audit.yml


dirname: /var/ossec/packages_files/agent_installation_scripts/src/init
filetypes: fffffffffffffffffff
filenames:
  adduser.sh/darwin-init.sh/dist-detect.sh/functions.sh/fw-check.sh/init.sh/inst-functions.sh/language.sh/ossec-client.sh/ossec-hids-suse.init/ossec-local.sh/ossec-server.sh/osx105-addusers.sh/pkg_installer.sh/register_configure_agent.sh/replace_manager_ip.sh/shared.sh/template-select.sh/update.sh


dirname: /var/ossec/active-response/bin
filetypes: fffffffffffffffff
filenames:
  default-firewall-drop.sh/disable-account.sh/firewall-drop.sh/firewalld-drop.sh/host-deny.sh/ip-customblock.sh/ipfw.sh/ipfw_mac.sh/kaspersky.py/kaspersky.sh/npf.sh/ossec-slack.sh/ossec-tweeter.sh/pf.sh/restart-ossec.sh/restart.sh/route-null.sh


dirname: /var/ossec/tmp/sca-3.11.4-1-tmp/debian
filetypes: dddfffffff
filenames:
  7/8/9/cis_debian7_L1.yml/cis_debian7_L2.yml/cis_debian8_L1.yml/cis_debian8_L2.yml/cis_debian9_L1.yml/cis_debian9_L2.yml/sca.files


dirname: /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic
filetypes: fffffffffdfffffffffffffff
filenames:
  alerts.template/ar-commands.template/ar-definitions.template/auth.template/cluster.template/global-ar.template/global.template/header-comments.template/localfile-commands.template/localfile-logs/logging.template/osquery.template/remote-secure.template/rootcheck.agent.template/rootcheck.manager.template/rules.template/sca.files/sca.manager.files/sca.template/syscheck.agent.template/syscheck.manager.template/wodle-ciscat.template/wodle-openscap.template/wodle-syscollector.template/wodle-vulnerability-detector.manager.template


dirname: /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/centos/6
filetypes: fffff
filenames:
  openscap.files/rootcheck.agent.template/rootcheck.manager.template/sca.files/wodle-openscap.template


dirname: /var/ossec/agentless
filetypes: ffffffffffff
filenames:
  main.exp/register_host.sh/ssh.exp/ssh_asa-fwsmconfig_diff/ssh_foundry_diff/ssh_generic_diff/ssh_integrity_check_bsd/ssh_integrity_check_linux/ssh_nopass.exp/ssh_pixconfig_diff/sshlogin.exp/su.exp


dirname: /var/ossec/bin
filetypes: fffffffff
filenames:
  agent-auth/manage_agents/ossec-agentd/ossec-control/ossec-execd/ossec-logcollector/ossec-syscheckd/util.sh/wazuh-modulesd


dirname: /var/ossec/etc
filetypes: fffffdf
filenames:
  client.keys/internal_options.conf/local_internal_options.conf/localtime/ossec.conf/shared/wpk_root.pem


dirname: /var/ossec/packages_files/agent_installation_scripts/src/init
filetypes: fffffffffffffffffff
filenames:
  adduser.sh/darwin-addusers.sh/darwin-init.sh/dist-detect.sh/functions.sh/fw-check.sh/init.sh/inst-functions.sh/language.sh/ossec-hids-suse.init/pkg_installer.sh/register_configure_agent.sh/replace_manager_ip.sh/shared.sh/template-select.sh/update.sh/wazuh-client.sh/wazuh-local.sh/wazuh-server.sh


dirname: /var/ossec/active-response/bin
filetypes: fffffffffffffff
filenames:
  default-firewall-drop/disable-account/firewall-drop/firewalld-drop/host-deny/ip-customblock/ipfw/kaspersky/kaspersky.py/npf/pf/restart-wazuh/restart.sh/route-null/wazuh-slack


dirname: /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic
filetypes: fffffffffdfffffffffffffff
filenames:
  alerts.template/ar-commands.template/ar-definitions.template/auth.template/cluster.template/global-ar.template/global.template/header-comments.template/localfile-commands.template/localfile-logs/logging.template/osquery.template/remote-secure.template/rootcheck.agent.template/rootcheck.manager.template/rule_test.template/rules.template/sca.files/sca.manager.files/sca.template/syscheck.agent.template/syscheck.manager.template/wodle-ciscat.template/wodle-syscollector.template/wodle-vulnerability-detector.manager.template


dirname: /var/ossec/bin
filetypes: ffffffff
filenames:
  agent-auth/manage_agents/wazuh-agentd/wazuh-control/wazuh-execd/wazuh-logcollector/wazuh-modulesd/wazuh-syscheckd


