# filelist

dirname: /var/ossec/agentless
filetypes: ffffffffffff
filenames:
  main.exp/register_host.sh/ssh.exp/ssh_asa-fwsmconfig_diff/ssh_foundry_diff/ssh_generic_diff/ssh_integrity_check_bsd/ssh_integrity_check_linux/ssh_nopass.exp/ssh_pixconfig_diff/sshlogin.exp/su.exp


dirname: /var/ossec/etc/templates
filetypes: ffffffffffff
filenames:
  active-response.template/apache-logs.template/ar-disable-account.template/ar-firewall-drop.template/ar-host-deny.template/ar-routenull.template/pgsql-logs.template/rootcheck.template/rules.template/snort-logs.template/syscheck.template/syslog-logs.template


dirname: /var/ossec/active-response/bin
filetypes: fffffffffffff
filenames:
  cloudflare-ban.sh/disable-account.sh/firewall-drop.sh/firewalld-drop.sh/host-deny.sh/ip-customblock.sh/nftables-drop.sh/ossec-aws-waf.sh/ossec-pagerduty.sh/ossec-slack.sh/ossec-tweeter.sh/restart-ossec.sh/route-null.sh


dirname: /var/ossec/ossec-agent/etc/shared
filetypes: ffffffffffffffffffffffffffffffff
filenames:
  acsc_office2016_rcl.txt/cis_apache2224_rcl.txt/cis_debian_linux_rcl.txt/cis_debianlinux7-8_L1_rcl.txt/cis_debianlinux7-8_L2_rcl.txt/cis_mysql5-6_community_rcl.txt/cis_mysql5-6_enterprise_rcl.txt/cis_rhel5_linux_rcl.txt/cis_rhel6_linux_rcl.txt/cis_rhel7_linux_rcl.txt/cis_rhel_linux_rcl.txt/cis_sles11_linux_rcl.txt/cis_sles12_linux_rcl.txt/cis_solaris11_rcl.txt/cis_win10_enterprise_L1_rcl.txt/cis_win10_enterprise_L2_rcl.txt/cis_win2012r2_domainL1_rcl.txt/cis_win2012r2_domainL2_rcl.txt/cis_win2012r2_memberL1_rcl.txt/cis_win2012r2_memberL2_rcl.txt/cis_win2016_domainL1_rcl.txt/cis_win2016_domainL2_rcl.txt/cis_win2016_memberL1_rcl.txt/cis_win2016_memberL2_rcl.txt/rootkit_files.txt/rootkit_trojans.txt/system_audit_pw.txt/system_audit_rcl.txt/system_audit_ssh.txt/win_applications_rcl.txt/win_audit_rcl.txt/win_malware_rcl.txt


dirname: /var/ossec/bin
filetypes: fffffff
filenames:
  agent-auth/client-logcollector/client-syscheckd/manage_agent/ossec-agentd/ossec-client.sh/ossec-execd


dirname: /usr/lib/debug/var/ossec/bin
filetypes: ffffff
filenames:
  agent-auth-3.7.0-33001.amzn2023.art.aarch64.debug/client-logcollector-3.7.0-33001.amzn2023.art.aarch64.debug/client-syscheckd-3.7.0-33001.amzn2023.art.aarch64.debug/manage_agent-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-agentd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-execd-3.7.0-33001.amzn2023.art.aarch64.debug


dirname: /usr/lib/debug/.build-id/e3
filetypes: ffff
filenames:
  1278fc73cb802d62c26044d59239f5cef1a529/1278fc73cb802d62c26044d59239f5cef1a529.debug/42a15b60493803b75adf61da67179d1833553b/42a15b60493803b75adf61da67179d1833553b.debug


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/shared
filetypes: fffffffffffffffffffffffff
filenames:
  agent_op.c/custom_output_search_replace.c/debug_op.c/file-queue.c/file_op.c/fs_op.c/hash_op.c/help.c/list_op.c/math_op.c/mem_op.c/mq_op.c/privsep_op.c/pthreads_op.c/randombytes.c/read-agents.c/read-alert.c/regex_op.c/report_op.c/rules_op.c/sig_op.c/store_op.c/string_op.c/validate_op.c/wait_op.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/rootcheck
filetypes: ffffffffffffffffff
filenames:
  check_open_ports.c/check_rc_dev.c/check_rc_files.c/check_rc_if.c/check_rc_pids.c/check_rc_policy.c/check_rc_ports.c/check_rc_readproc.c/check_rc_sys.c/check_rc_trojans.c/common.c/common_rcl.c/config.c/os_string.c/rootcheck.c/rootcheck.h/run_rk_check.c/unix-process.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/monitord
filetypes: fffffffff
filenames:
  compress_log.c/generate_reports.c/main.c/manage_files.c/monitor_agents.c/monitord.c/monitord.h/sendcustomemail.c/sign_log.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/os_regex
filetypes: fffffffffffffffffffff
filenames:
  os_converter.c/os_match.c/os_match_compile.c/os_match_execute.c/os_match_free_pattern.c/os_pcre2.c/os_pcre2_compile.c/os_pcre2_execute.c/os_pcre2_free_pattern.c/os_pcre2_free_substrings.c/os_regex.c/os_regex.h/os_regex_compile.c/os_regex_execute.c/os_regex_free_pattern.c/os_regex_free_substrings.c/os_regex_internal.h/os_regex_maps.c/os_regex_match.c/os_regex_str.c/os_regex_strbreak.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/headers
filetypes: fffffffffffffffffffffffffff
filenames:
  agent_op.h/custom_output_search.h/debug_op.h/file-queue.h/file_op.h/fs_op.h/hash_op.h/help.h/list_op.h/math_op.h/mem_op.h/mq_op.h/privsep_op.h/pthreads_op.h/randombytes.h/read-agents.h/read-alert.h/regex_op.h/report_op.h/rules_op.h/sec.h/shared.h/sig_op.h/store_op.h/string_op.h/validate_op.h/wait_op.h


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/util
filetypes: ffffffff
filenames:
  agent_control.c/clear_stats.c/list_agents.c/ossec-regex.c/rootcheck_control.c/syscheck_control.c/syscheck_update.c/verify-agent-conf.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/client-agent
filetypes: fffffffffff
filenames:
  agentd.c/agentd.h/config.c/event-forward.c/intcheck_op.c/main.c/notify.c/receiver-win.c/receiver.c/sendmsg.c/start_agent.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/analysisd/decoders
filetypes: fffffffdff
filenames:
  decode-xml.c/decoder.c/decoder.h/decoders_list.c/hostinfo.c/plugin_decoders.c/plugin_decoders.h/plugins/rootcheck.c/syscheck.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/analysisd
filetypes: ffffdffdffdffdfffffdffffffffdffffff
filenames:
  accumulator.c/accumulator.h/active-response.c/active-response.h/alerts/analysisd.c/analysisd.h/cdb/cleanevent.c/cleanevent.h/compiled_rules/config.c/config.h/decoders/dodiff.c/dodiff.h/eventinfo.c/eventinfo.h/eventinfo_list.c/format/fts.c/fts.h/lists.c/lists.h/lists_list.c/lists_make.c/lists_make.h/makelists.c/output/rules.c/rules.h/rules_list.c/stats.c/stats.h/testrule.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/config
filetypes: ffffffffffffffffffffffffffff
filenames:
  active-response.c/active-response.h/agentlessd-config.c/agentlessd-config.h/alerts-config.c/client-config.c/client-config.h/config.c/config.h/csyslogd-config.c/csyslogd-config.h/dbd-config.c/dbd-config.h/email-alerts-config.c/global-config.c/global-config.h/localfile-config.c/localfile-config.h/mail-config.h/remote-config.c/remote-config.h/reports-config.c/reports-config.h/rootcheck-config.c/rootcheck-config.h/rules-config.c/syscheck-config.c/syscheck-config.h


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src/logcollector
filetypes: ffffffffffffffffffff
filenames:
  config.c/logcollector.c/logcollector.h/main.c/read_audit.c/read_command.c/read_djb_multilog.c/read_fullcommand.c/read_journald.c/read_mssql_log.c/read_multiline.c/read_multiline_indented.c/read_mysql_log.c/read_nmapg.c/read_ossecalert.c/read_postgresql_log.c/read_snortfull.c/read_syslog.c/read_win_el.c/read_win_event_channel.c


dirname: /usr/src/debug/ossec-hids-3.7.0-33001.amzn2023.art.aarch64/src
filetypes: ddddddddddddddddddddddddd
filenames:
  addagent/agentlessd/analysisd/client-agent/config/external/headers/logcollector/monitord/os_auth/os_crypto/os_csyslogd/os_dbd/os_execd/os_maild/os_net/os_regex/os_xml/os_zlib/remoted/reportd/rootcheck/shared/syscheckd/util


dirname: /var/ossec/ossec-agent/etc/shared
filetypes: fffffffffffffffffffffffffffffffff
filenames:
  acsc_office2016_rcl.txt/agent.conf/cis_apache2224_rcl.txt/cis_debian_linux_rcl.txt/cis_debianlinux7-8_L1_rcl.txt/cis_debianlinux7-8_L2_rcl.txt/cis_mysql5-6_community_rcl.txt/cis_mysql5-6_enterprise_rcl.txt/cis_rhel5_linux_rcl.txt/cis_rhel6_linux_rcl.txt/cis_rhel7_linux_rcl.txt/cis_rhel_linux_rcl.txt/cis_sles11_linux_rcl.txt/cis_sles12_linux_rcl.txt/cis_solaris11_rcl.txt/cis_win10_enterprise_L1_rcl.txt/cis_win10_enterprise_L2_rcl.txt/cis_win2012r2_domainL1_rcl.txt/cis_win2012r2_domainL2_rcl.txt/cis_win2012r2_memberL1_rcl.txt/cis_win2012r2_memberL2_rcl.txt/cis_win2016_domainL1_rcl.txt/cis_win2016_domainL2_rcl.txt/cis_win2016_memberL1_rcl.txt/cis_win2016_memberL2_rcl.txt/rootkit_files.txt/rootkit_trojans.txt/system_audit_pw.txt/system_audit_rcl.txt/system_audit_ssh.txt/win_applications_rcl.txt/win_audit_rcl.txt/win_malware_rcl.txt


dirname: /usr/lib/debug/var/ossec/ossec-agent/bin
filetypes: ffffff
filenames:
  agent-auth-3.7.0-33001.amzn2023.art.aarch64.debug/manage_agent-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-agentd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-execd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-logcollector-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-syscheckd-3.7.0-33001.amzn2023.art.aarch64.debug


dirname: /usr/share/ossec/contrib/ossec-testing/tests
filetypes: ffffffffffffffffffffffffffffffffffffff
filenames:
  apache.ini/apparmor.ini/asterisk.ini/cimserver.ini/cisco_ios.ini/cpanel.ini/dnsmasq.ini/doas.ini/dovecot.ini/dpkg.ini/dropbear.ini/exim.ini/firewalld.ini/mailscanner.ini/modsecurity.ini/named.ini/netscreen.ini/nginx.ini/openbsd-dhcpd.ini/openbsd-httpd.ini/openbsd.ini/opensmtpd.ini/ossec.ini/pam.ini/postfix.ini/proftpd.ini/rsh.ini/samba.ini/sshd.ini/su.ini/sudo.ini/syslog.ini/sysmon.ini/systemd.ini/unbound.ini/vsftpd.ini/web_appsec.ini/web_rules.ini


dirname: /var/ossec/rules/translated/pure_ftpd
filetypes: ffffffffffffff
filenames:
  pure-ftpd_rules_da.xml/pure-ftpd_rules_de.xml/pure-ftpd_rules_en.xml/pure-ftpd_rules_es.xml/pure-ftpd_rules_fr.xml/pure-ftpd_rules_fr_funny.xml/pure-ftpd_rules_it.xml/pure-ftpd_rules_nl.xml/pure-ftpd_rules_no.xml/pure-ftpd_rules_pt_br.xml/pure-ftpd_rules_ro.xml/pure-ftpd_rules_sk.xml/pure-ftpd_rules_sv.xml/pure-ftpd_rules_tr.xml


dirname: /usr/share/ossec/contrib/debian-packages/ossec-hids/debian
filetypes: ffffffdffffdf
filenames:
  changelog/compat/conffiles/control/copyright/ossec-hids.lintian-overrides/patches/postinst/postrm/preinst/rules/source/templates


dirname: /usr/share/ossec/contrib/debian-packages/ossec-hids-agent/debian
filetypes: ffffffdffffdf
filenames:
  changelog/compat/conffiles/control/copyright/ossec-hids-agent.lintian-overrides/patches/postinst/postrm/preinst/rules/source/templates


dirname: /usr/share/ossec/contrib
filetypes: fffffdfdfffffdffffffffffffddfff
filenames:
  active-list.pl/add_localfile.sh/compile_alerts.pl/compile_alerts.txt/config2xml/debian-packages/iis-logs.bat/logtesting/mysql.schema/ossec-batch-manager.pl/ossec-configure/ossec-eps.sh/ossec-pcre2-config.pl/ossec-testing/ossec2mysql.conf/ossec2mysql.pl/ossec2mysql.sql/ossec2mysqld.pl/ossec2rss.php/ossec_report.txt/ossec_report_contrib.pl/ossecmysql.pm/ossectop.pl/postgresql.schema/rename_agent.sh/renumber_agent.sh/selinux/snapcraft/util.sh/version_bump.sh/zeromq_pubsub.py


dirname: /usr/share/ossec/contrib/logtesting
filetypes: ddddddddddddddddddddddddddddddddddddddddddddf
filenames:
  1/10/11/12/13/14/15/16/17/18/19/2/20/21/22/23/24/25/26/27/28/29/3/30/31/32/33/34/35/36/37/38/39/4/40/41/42/43/44/5/6/7/8/9/dotests.sh


dirname: /var/ossec/rules
filetypes: fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffff
filenames:
  apache_rules.xml/apparmor_rules.xml/arpwatch_rules.xml/asterisk_rules.xml/attack_rules.xml/cimserver_rules.xml/cisco-ios_rules.xml/clam_av_rules.xml/courier_rules.xml/dnsmasq_rules.xml/dovecot_rules.xml/dropbear_rules.xml/exclusion_rules.xml/exim_rules.xml/firewall_rules.xml/firewalld_rules.xml/ftpd_rules.xml/hordeimp_rules.xml/ids_rules.xml/imapd_rules.xml/kesl_rules.xml/last_rootlogin_rules.xml/lighttpd_rules.xml/linux_usbdetect_rules.xml/local_rules.xml/mailscanner_rules.xml/mcafee_av_rules.xml/mhn_cowrie_rules.xml/mhn_dionaea_rules.xml/ms-exchange_rules.xml/ms-se_rules.xml/ms1016_usbdetect_rules.xml/ms_dhcp_rules.xml/ms_firewall_rules.xml/ms_ftpd_rules.xml/ms_ipsec_rules.xml/ms_powershell_rules.xml/msauth_rules.xml/mysql_rules.xml/named_rules.xml/netscreenfw_rules.xml/nginx_rules.xml/nsd_rules.xml/openbsd-dhcpd_rules.xml/openbsd_rules.xml/opensmtpd_rules.xml/ossec_rules.xml/owncloud_rules.xml/pam_rules.xml/php_rules.xml/pix_rules.xml/policy_rules.xml/postfix_rules.xml/postgresql_rules.xml/proftpd_rules.xml/proxmox-ve_rules.xml/psad_rules.xml/pure-ftpd_rules.xml/racoon_rules.xml/roundcube_rules.xml/rules_config.xml/sendmail_rules.xml/smbd_rules.xml/solaris_bsm_rules.xml/sonicwall_rules.xml/spamd_rules.xml/squid_rules.xml/sshd_rules.xml/symantec-av_rules.xml/symantec-ws_rules.xml/syslog_rules.xml/sysmon_rules.xml/systemd_rules.xml/telnetd_rules.xml/topleveldomain_rules.xml/translated/trend-osce_rules.xml/unbound_rules.xml/vmpop3d_rules.xml/vmware_rules.xml/vpn_concentrator_rules.xml/vpopmail_rules.xml/vsftpd_rules.xml/web_appsec_rules.xml/web_rules.xml/wordpress_rules.xml/zeus_rules.xml


dirname: /var/ossec/bin
filetypes: ffffffffffffffffffffffff
filenames:
  agent_control/clear_stats/list_agents/manage_agents/ossec-agentd/ossec-agentlessd/ossec-analysisd/ossec-authd/ossec-csyslogd/ossec-execd/ossec-logcollector/ossec-logtest/ossec-maild/ossec-makelists/ossec-monitord/ossec-regex/ossec-remoted/ossec-reportd/ossec-server.sh/ossec-syscheckd/rootcheck_control/syscheck_control/syscheck_update/verify-agent-conf


dirname: /usr/lib/debug/var/ossec/bin
filetypes: fffffffffffffffffffffff
filenames:
  agent_control-3.7.0-33001.amzn2023.art.aarch64.debug/clear_stats-3.7.0-33001.amzn2023.art.aarch64.debug/list_agents-3.7.0-33001.amzn2023.art.aarch64.debug/manage_agents-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-agentd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-agentlessd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-analysisd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-authd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-csyslogd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-execd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-logcollector-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-logtest-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-maild-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-makelists-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-monitord-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-regex-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-remoted-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-reportd-3.7.0-33001.amzn2023.art.aarch64.debug/ossec-syscheckd-3.7.0-33001.amzn2023.art.aarch64.debug/rootcheck_control-3.7.0-33001.amzn2023.art.aarch64.debug/syscheck_control-3.7.0-33001.amzn2023.art.aarch64.debug/syscheck_update-3.7.0-33001.amzn2023.art.aarch64.debug/verify-agent-conf-3.7.0-33001.amzn2023.art.aarch64.debug


