1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
@info(root,ossec,0750) /var/ossec/active-response/bin/default-firewall-drop.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/disable-account.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/firewalld-drop.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/host-deny.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/ip-customblock.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/ipfw.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/ipfw_mac.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/kaspersky.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/npf.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/ossec-slack.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/ossec-tweeter.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/pf.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/restart-ossec.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/restart.sh
@info(root,ossec,0750) /var/ossec/active-response/bin/route-null.sh
@info(root,ossec,0750) /var/ossec/agentless/main.exp
@info(root,ossec,0750) /var/ossec/agentless/register_host.sh
@info(root,ossec,0750) /var/ossec/agentless/ssh.exp
@info(root,ossec,0750) /var/ossec/agentless/ssh_asa-fwsmconfig_diff
@info(root,ossec,0750) /var/ossec/agentless/ssh_foundry_diff
@info(root,ossec,0750) /var/ossec/agentless/ssh_generic_diff
@info(root,ossec,0750) /var/ossec/agentless/ssh_integrity_check_bsd
@info(root,ossec,0750) /var/ossec/agentless/ssh_integrity_check_linux
@info(root,ossec,0750) /var/ossec/agentless/ssh_nopass.exp
@info(root,ossec,0750) /var/ossec/agentless/ssh_pixconfig_diff
@info(root,ossec,0750) /var/ossec/agentless/sshlogin.exp
@info(root,ossec,0750) /var/ossec/agentless/su.exp
@info(root,root,0750) /var/ossec/bin/agent-auth
@info(root,root,0750) /var/ossec/bin/manage_agents
@info(root,root,0750) /var/ossec/bin/ossec-agentd
@info(root,root,0750) /var/ossec/bin/ossec-control
@info(root,root,0750) /var/ossec/bin/ossec-execd
@info(root,root,0750) /var/ossec/bin/ossec-logcollector
@info(root,root,0750) /var/ossec/bin/ossec-syscheckd
@info(root,root,0750) /var/ossec/bin/util.sh
@info(root,root,0750) /var/ossec/bin/wazuh-modulesd
@info(root,ossec,0640) /var/ossec/etc/client.keys
@info(root,ossec,0640) /var/ossec/etc/internal_options.conf
@info(root,ossec,0640) /var/ossec/etc/local_internal_options.conf
@info(root,ossec,0640) /var/ossec/etc/ossec.conf.sample
@info(root,ossec,0640) /var/ossec/etc/ossec.conf
@info(root,ossec,0660) /var/ossec/etc/shared/cis_apache2224_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_debian_linux_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_rhel_linux_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_sles11_linux_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_sles12_linux_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/rootkit_files.txt
@info(root,ossec,0660) /var/ossec/etc/shared/rootkit_trojans.txt
@info(root,ossec,0660) /var/ossec/etc/shared/system_audit_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/system_audit_ssh.txt
@info(root,ossec,0660) /var/ossec/etc/shared/win_applications_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/win_audit_rcl.txt
@info(root,ossec,0660) /var/ossec/etc/shared/win_malware_rcl.txt
@info(root,ossec,0640) /var/ossec/etc/wpk_root.pem
@info(root,ossec,0750) /var/ossec/lib/libwazuhext.so
@info(ossec,ossec,0666) /var/ossec/logs/active-responses.log
@info(ossec,ossec,0666) /var/ossec/logs/ossec.json
@info(ossec,ossec,0666) /var/ossec/logs/ossec.log
@info(root,ossec,0750) /var/ossec/wodles/oscap/oscap.py
@info(root,ossec,0750) /var/ossec/wodles/oscap/template_oval.xsl
@info(root,ossec,0750) /var/ossec/wodles/oscap/template_xccdf.xsl
@dir(root,ossec,0770) /var/ossec/.ssh
@dir(root,ossec,0750) /var/ossec/active-response/bin
@dir(root,ossec,0750) /var/ossec/active-response
@dir(root,ossec,0750) /var/ossec/agentless
@dir(root,ossec,0750) /var/ossec/backup
@dir(root,wheel,0750) /var/ossec/bin
@dir(root,ossec,0770) /var/ossec/etc/shared
@dir(ossec,ossec,0770) /var/ossec/etc
@dir(root,ossec,0750) /var/ossec/lib
@dir(ossec,ossec,0750) /var/ossec/logs/ossec
@dir(ossec,ossec,0770) /var/ossec/logs
@dir(ossec,ossec,0770) /var/ossec/queue/alerts
@dir(ossec,ossec,0750) /var/ossec/queue/diff
@dir(ossec,ossec,0770) /var/ossec/queue/fim/db
@dir(ossec,ossec,0770) /var/ossec/queue/fim
@dir(ossec,ossec,0770) /var/ossec/queue/ossec
@dir(ossec,ossec,0750) /var/ossec/queue/rids
@dir(root,ossec,0750) /var/ossec/queue
@dir(root,ossec,0750) /var/ossec/ruleset/sca
@dir(root,ossec,0750) /var/ossec/ruleset
@dir(root,ossec,1770) /var/ossec/tmp
@dir(root,ossec,0770) /var/ossec/var/incoming
@dir(root,ossec,0770) /var/ossec/var/run
@dir(root,ossec,0770) /var/ossec/var/upgrade
@dir(root,ossec,0770) /var/ossec/var/wodles
@dir(root,ossec,0750) /var/ossec/var
@dir(root,ossec,0750) /var/ossec/wodles/oscap/content
@dir(root,ossec,0750) /var/ossec/wodles/oscap
@dir(root,ossec,0750) /var/ossec/wodles
@dir(root,ossec,0750) /var/ossec
|
