OSSECについて学び始めた その８

#はじめに
ossecのソースコードについて、とりあえずツリー構造を調べました。

#以下
```
/home/ec2-user/ossec-hids-master
|--active-response
|  |--cloudflare-ban.sh
|  |--disable-account.sh
|  |--firewalld-drop.sh
|  |--firewall-drop.sh
|  |--firewalls
|  |  |--ipfw_mac.sh
|  |  |--ipfw.sh
|  |  |--npf.sh
|  |  |--pf.sh
|  |--host-deny.sh
|  |--ip-customblock.sh
|  |--ossec-aws-waf.sh
|  |--ossec-pagerduty.sh
|  |--ossec-slack.sh
|  |--ossec-tweeter.sh
|  |--restart-ossec.sh
|  |--route-null.sh
|  |--win
|  |  |--firewall-drop.cmd
|  |  |--netsh.cmd
|  |  |--restart-ossec.cmd
|  |  |--route-null.cmd
|--BUGS
|--build.sh
|--CHANGELOG.md
|--CONFIG
|--contrib
|  |--active-list.pl
|  |--add_localfile.sh
|  |--compile_alerts.pl
|  |--compile_alerts.txt
|  |--config2xml
|  |--debian-packages
|  |  |--generate_ossec.sh
|  |  |--ossec-hids
|  |  |--ossec-hids-agent
|  |  |  |--debian
|  |  |  |  |--changelog
|  |  |  |  |--compat
|  |  |  |  |--conffiles
|  |  |  |  |--control
|  |  |  |  |--copyright
|  |  |  |  |--ossec-hids-agent.lintian-overrides
|  |  |  |  |--patches
|  |  |  |  |  |--01_makefile.patch
|  |  |  |  |  |--02_ossec-agent.conf.patch
|  |  |  |  |  |--series
|  |  |  |  |--postinst
|  |  |  |  |--postrm
|  |  |  |  |--preinst
|  |  |  |  |--rules
|  |  |  |  |--source
|  |  |  |  |  |--format
|  |  |  |  |--templates
|  |  |  |--debian
|  |  |  |  |--changelog
|  |  |  |  |--compat
|  |  |  |  |--conffiles
|  |  |  |  |--control
|  |  |  |  |--copyright
|  |  |  |  |--ossec-hids.lintian-overrides
|  |  |  |  |--patches
|  |  |  |  |  |--01_makefile.patch
|  |  |  |  |  |--02_ossec-server.conf.patch
|  |  |  |  |  |--series
|  |  |  |  |--postinst
|  |  |  |  |--postrm
|  |  |  |  |--preinst
|  |  |  |  |--rules
|  |  |  |  |--source
|  |  |  |  |  |--format
|  |  |  |  |--templates
|  |  |--pbuilderrc
|  |  |--Readme.txt
|  |--iis-logs.bat
|  |--logtesting
|  |  |--1
|  |  |--10
|  |  |  |--log
|  |  |  |--res
|  |  |--11
|  |  |  |--log
|  |  |  |--res
|  |  |--12
|  |  |  |--log
|  |  |  |--res
|  |  |--13
|  |  |  |--log
|  |  |  |--res
|  |  |--14
|  |  |  |--log
|  |  |  |--res
|  |  |--15
|  |  |  |--log
|  |  |  |--res
|  |  |--16
|  |  |  |--log
|  |  |  |--res
|  |  |--17
|  |  |  |--log
|  |  |  |--res
|  |  |--18
|  |  |  |--log
|  |  |  |--res
|  |  |--19
|  |  |  |--log
|  |  |  |--res
|  |  |  |--log
|  |  |  |--res
|  |  |--2
|  |  |--20
|  |  |  |--log
|  |  |  |--res
|  |  |--21
|  |  |  |--log
|  |  |  |--res
|  |  |--22
|  |  |  |--log
|  |  |  |--res
|  |  |--23
|  |  |  |--log
|  |  |  |--res
|  |  |--24
|  |  |  |--log
|  |  |  |--res
|  |  |--25
|  |  |  |--log
|  |  |  |--res
|  |  |--26
|  |  |  |--log
|  |  |  |--res
|  |  |--27
|  |  |  |--log
|  |  |  |--res
|  |  |--28
|  |  |  |--log
|  |  |  |--res
|  |  |--29
|  |  |  |--log
|  |  |  |--res
|  |  |  |--log
|  |  |  |--res
|  |  |--3
|  |  |--30
|  |  |  |--log
|  |  |  |--res
|  |  |--31
|  |  |  |--log
|  |  |  |--res
|  |  |--32
|  |  |  |--log
|  |  |  |--res
|  |  |--33
|  |  |  |--log
|  |  |  |--res
|  |  |--34
|  |  |  |--log
|  |  |  |--res
|  |  |--35
|  |  |  |--log
|  |  |  |--res
|  |  |--36
|  |  |  |--log
|  |  |  |--res
|  |  |--37
|  |  |  |--log
|  |  |  |--res
|  |  |--38
|  |  |  |--log
|  |  |  |--res
|  |  |--39
|  |  |  |--log
|  |  |  |--res
|  |  |  |--log
|  |  |  |--res
|  |  |--4
|  |  |--40
|  |  |  |--log
|  |  |  |--res
|  |  |--41
|  |  |  |--log
|  |  |  |--res
|  |  |--42
|  |  |  |--log
|  |  |  |--res
|  |  |--43
|  |  |  |--log
|  |  |  |--res
|  |  |--44
|  |  |  |--log
|  |  |  |--res
|  |  |  |--log
|  |  |  |--res
|  |  |--5
|  |  |  |--log
|  |  |  |--res
|  |  |--6
|  |  |  |--log
|  |  |  |--res
|  |  |--7
|  |  |  |--log
|  |  |  |--res
|  |  |--8
|  |  |  |--log
|  |  |  |--res
|  |  |--9
|  |  |  |--log
|  |  |  |--res
|  |  |--dotests.sh
|  |--ossec2mysql.conf
|  |--ossec2mysqld.pl
|  |--ossec2mysql.pl
|  |--ossec2mysql.sql
|  |--ossec2rss.php
|  |--ossec-batch-manager.pl
|  |--ossec-configure
|  |--ossec-eps.sh
|  |--ossecmysql.pm
|  |--ossec-pcre2-config.pl
|  |--ossec_report_contrib.pl
|  |--ossec_report.txt
|  |--ossec_rules_list.py
|  |--ossec-testing
|  |  |--runtests.py
|  |  |--tests
|  |  |  |--apache.ini
|  |  |  |--apparmor.ini
|  |  |  |--asterisk.ini
|  |  |  |--cimserver.ini
|  |  |  |--cisco_ios.ini
|  |  |  |--cpanel.ini
|  |  |  |--dnsmasq.ini
|  |  |  |--doas.ini
|  |  |  |--dovecot.ini
|  |  |  |--dpkg.ini
|  |  |  |--dropbear.ini
|  |  |  |--exim.ini
|  |  |  |--firewalld.ini
|  |  |  |--mailscanner.ini
|  |  |  |--modsecurity.ini
|  |  |  |--named.ini
|  |  |  |--netscreen.ini
|  |  |  |--nginx.ini
|  |  |  |--openbsd-dhcpd.ini
|  |  |  |--openbsd-httpd.ini
|  |  |  |--openbsd.ini
|  |  |  |--opensmtpd.ini
|  |  |  |--ossec.ini
|  |  |  |--pam.ini
|  |  |  |--postfix.ini
|  |  |  |--proftpd.ini
|  |  |  |--rsh.ini
|  |  |  |--samba.ini
|  |  |  |--sshd.ini
|  |  |  |--sudo.ini
|  |  |  |--su.ini
|  |  |  |--syslog.ini
|  |  |  |--sysmon.ini
|  |  |  |--systemd.ini
|  |  |  |--unbound.ini
|  |  |  |--vsftpd.ini
|  |  |  |--web_appsec.ini
|  |  |  |--web_rules.ini
|  |--ossectop.pl
|  |--rename_agent.sh
|  |--renumber_agent.sh
|  |--selinux
|  |  |--ossec_agent
|  |  |  |--ossec_agent.fc
|  |  |  |--ossec_agent.if
|  |  |  |--ossec_agent.te
|  |  |--ossec_agent.pp.bz2
|  |  |--README.md
|  |--snapcraft
|  |  |--files
|  |  |  |--bin
|  |  |  |  |--wrapper
|  |  |--snap
|  |  |  |--snapcraft.yaml
|  |--specs
|  |  |--agent
|  |  |  |--ossec-hids-agent.spec
|  |  |  |--preloaded-vars.conf
|  |  |--getattr.pl
|  |  |--local
|  |  |  |--ossec-hids-local.spec
|  |  |  |--preloaded-vars.conf
|  |  |--remove_ossec
|  |  |--server
|  |  |  |--ossec-hids-server.spec
|  |  |  |--preloaded-vars.conf
|  |--util.sh
|--CONTRIBUTORS
|  |--version_bump.sh
|  |--zeromq_pubsub.py
|--debian_files
|  |--3.6.0
|  |  |--ossec-hids-agent
|  |  |  |--debian
|  |  |  |  |--changelog
|  |  |  |  |--compat
|  |  |  |  |--conffiles
|  |  |  |  |--control
|  |  |  |  |--copyright
|  |  |  |  |--ossec-hids-agent.lintian-overrides
|  |  |  |  |--patches
|  |  |  |  |  |--01_makefile.patch
|  |  |  |  |  |--02_ossec-agent.conf.patch
|  |  |  |  |  |--series
|  |  |  |  |--postinst
|  |  |  |  |--postrm
|  |  |  |  |--preinst
|  |  |  |  |--rules
|  |  |  |  |--source
|  |  |  |  |  |--format
|  |  |  |  |--templates
|--doc
|  |--active-response-internal.txt
|  |--active-response.txt
|  |--br
|  |  |--active-response-internal.txt
|  |  |--active-response.txt
|  |  |--INSTALL.br
|  |  |--logs.txt
|  |  |--manager.txt
|  |  |--README.config
|  |  |--rootcheck.txt
|  |  |--rule_ids.txt
|  |  |--rules.txt
|  |  |--TRANSLATION
|  |--images
|  |  |--fim-test.gif
|  |  |--ssh-attack.gif
|--Dockerfile
|  |--logs.txt
|  |--manage_agents.txt
|  |--manager.txt
|  |--nmap.txt
|  |--pl
|  |  |--active-response-internal.txt
|  |  |--active-response.txt
|  |  |--INSTALL.pl
|  |  |--logs.txt
|  |  |--manager.txt
|  |  |--README.config
|  |  |--rootcheck.txt
|  |  |--rule_ids.txt
|  |  |--rules.txt
|  |  |--TRANSLATION
|  |--README.config
|  |--rootcheck.txt
|  |--rule_ids.txt
|  |--rules.txt
|--etc
|  |--decoder.xml
|  |--internal_options.conf
|  |--local_internal_options.conf
|  |--local_internal_options-win.conf
|  |--ossec-agent.conf
|  |--ossec.conf
|  |--ossec-local.conf
|  |--ossec-server.conf
|  |--preloaded-vars.conf.example
|  |--rules
|  |  |--apache_rules.xml
|  |  |--apparmor_rules.xml
|  |  |--arpwatch_rules.xml
|  |  |--asterisk_rules.xml
|  |  |--attack_rules.xml
|  |  |--cimserver_rules.xml
|  |  |--cisco-ios_rules.xml
|  |  |--clam_av_rules.xml
|  |  |--courier_rules.xml
|  |  |--dnsmasq_rules.xml
|  |  |--dovecot_rules.xml
|  |  |--dropbear_rules.xml
|  |  |--exim_rules.xml
|  |  |--firewalld_rules.xml
|  |  |--firewall_rules.xml
|  |  |--ftpd_rules.xml
|  |  |--hordeimp_rules.xml
|  |  |--ids_rules.xml
|  |  |--imapd_rules.xml
|  |  |--kesl_rules.xml
|  |  |--last_rootlogin_rules.xml
|  |  |--lighttpd_rules.xml
|  |  |--linux_usbdetect_rules.xml
|  |  |--local_rules.xml
|  |  |--log-entries
|  |  |  |--101
|  |  |  |--1101
|  |  |  |--1301_1302_1303
|  |  |  |--1401
|  |  |  |--1402
|  |  |  |--1602
|  |  |  |--1603
|  |  |  |--1607
|  |  |  |--1609
|  |  |  |--1901
|  |  |  |--1902
|  |  |  |--1903
|  |  |  |--1905
|  |  |  |--201
|  |  |  |--202
|  |  |  |--204
|  |  |  |--2501
|  |  |  |--2601
|  |  |  |--301
|  |  |  |--401
|  |  |  |--403
|  |  |  |--408
|  |  |  |--409
|  |  |  |--access-control
|  |  |  |--apache-error.logs
|  |  |  |--ciscoios
|  |  |  |--cisco-ios-ids
|  |  |  |--ftpd
|  |  |  |--iis6
|  |  |  |--imapd
|  |  |  |--kernel
|  |  |  |--mail-alerts
|  |  |  |--mail-errors
|  |  |  |--ns1
|  |  |  |--proftpd
|  |  |  |--smbd
|  |  |  |--spamd
|  |  |  |--sshd
|  |  |  |--symantecws
|  |  |  |--telnetd
|  |  |  |--unkown
|  |  |  |--vpn.log
|  |  |  |--vpopmail
|  |  |  |--worms
|  |  |  |--xferlog
|  |  |--mailscanner_rules.xml
|  |  |--mcafee_av_rules.xml
|  |  |--mhn_cowrie_rules.xml
|  |  |--mhn_dionaea_rules.xml
|  |  |--ms1016_usbdetect_rules.xml
|  |  |--msauth_rules.xml
|  |  |--ms_dhcp_rules.xml
|  |  |--ms-exchange_rules.xml
|  |  |--ms_firewall_rules.xml
|  |  |--ms_ftpd_rules.xml
|  |  |--ms_ipsec_rules.xml
|  |  |--ms_powershell_rules.xml
|  |  |--ms-se_rules.xml
|  |  |--mysql_rules.xml
|  |  |--named_rules.xml
|  |  |--netscreenfw_rules.xml
|  |  |--nginx_rules.xml
|  |  |--nsd_rules.xml
|  |  |--openbsd-dhcpd_rules.xml
|  |  |--openbsd_rules.xml
|  |  |--opensmtpd_rules.xml
|  |  |--ossec_rules.xml
|  |  |--owncloud_rules.xml
|  |  |--pam_rules.xml
|  |  |--php_rules.xml
|  |  |--pix_rules.xml
|  |  |--policy_rules.xml
|  |  |--postfix_rules.xml
|  |  |--postgresql_rules.xml
|  |  |--proftpd_rules.xml
|  |  |--proxmox-ve_rules.xml
|  |  |--psad_rules.xml
|  |  |--pure-ftpd_rules.xml
|  |  |--racoon_rules.xml
|  |  |--roundcube_rules.xml
|  |  |--rules_config.xml
|  |  |--sendmail_rules.xml
|  |  |--smbd_rules.xml
|  |  |--solaris_bsm_rules.xml
|  |  |--sonicwall_rules.xml
|  |  |--spamd_rules.xml
|  |  |--squid_rules.xml
|  |  |--sshd_rules.xml
|  |  |--symantec-av_rules.xml
|  |  |--symantec-ws_rules.xml
|  |  |--syslog_rules.xml
|  |  |--sysmon_rules.xml
|  |  |--systemd_rules.xml
|  |  |--telnetd_rules.xml
|  |  |--topleveldomain_rules.xml
|  |  |--translated
|  |  |  |--pure_ftpd
|  |  |  |  |--pure-ftpd_rules_da.xml
|  |  |  |  |--pure-ftpd_rules_de.xml
|  |  |  |  |--pure-ftpd_rules_en.xml
|  |  |  |  |--pure-ftpd_rules_es.xml
|  |  |  |  |--pure-ftpd_rules_fr_funny.xml
|  |  |  |  |--pure-ftpd_rules_fr.xml
|  |  |  |  |--pure-ftpd_rules_it.xml
|  |  |  |  |--pure-ftpd_rules_nl.xml
|  |  |  |  |--pure-ftpd_rules_no.xml
|  |  |  |  |--pure-ftpd_rules_pt_br.xml
|  |  |  |  |--pure-ftpd_rules_ro.xml
|  |  |  |  |--pure-ftpd_rules_sk.xml
|  |  |  |  |--pure-ftpd_rules_sv.xml
|  |  |  |  |--pure-ftpd_rules_tr.xml
|  |  |--trend-osce_rules.xml
|  |  |--unbound_rules.xml
|  |  |--vmpop3d_rules.xml
|  |  |--vmware_rules.xml
|  |  |--vpn_concentrator_rules.xml
|  |  |--vpopmail_rules.xml
|  |  |--vsftpd_rules.xml
|  |  |--web_appsec_rules.xml
|  |  |--web_rules.xml
|  |  |--wordpress_rules.xml
|  |  |--zeus_rules.xml
|  |--templates
|  |  |--br
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--cn
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--config
|  |  |  |--active-response.template
|  |  |  |--apache-logs.template
|  |  |  |--ar-disable-account.template
|  |  |  |--ar-firewall-drop.template
|  |  |  |--ar-host-deny.template
|  |  |  |--ar-routenull.template
|  |  |  |--pgsql-logs.template
|  |  |  |--rootcheck.template
|  |  |  |--rules.template
|  |  |  |--snort-logs.template
|  |  |  |--syscheck.template
|  |  |  |--syslog-logs.template
|  |  |--de
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--el
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--en
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--es
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--fr
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--hu
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--it
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--jp
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--nl
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--pl
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--ru
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--sr
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|  |  |--tr
|  |  |  |--errors
|  |  |  |  |--0x1-location.txt
|  |  |  |  |--0x2-beroot.txt
|  |  |  |  |--0x3-dependencies.txt
|  |  |  |  |--0x4-installtype.txt
|  |  |  |  |--0x5-build.txt
|  |  |  |--language.txt
|  |  |  |--messages
|  |  |  |  |--0x101-initial.txt
|  |  |  |  |--0x102-installhelp.txt
|  |  |  |  |--0x103-thanksforusing.txt
|  |  |  |  |--0x104-client.txt
|  |  |  |  |--0x105-noboot.txt
|  |  |  |  |--0x106-logs.txt
|  |  |  |  |--0x107-ar.txt
|  |  |  |  |--0x108-ar-enabled.txt
|  |  |  |--messages.txt
|--.gitignore
|--INSTALL
|--install.sh
|--LICENSE
|--README.md
|--src
|  |--addagent
|  |  |--b64.c
|  |  |--main.c
|  |  |--manage_agents.c
|  |  |--manage_agents.h
|  |  |--manage_keys.c
|  |  |--read_from_user.c
|  |  |--validate.c
|  |--agentlessd
|  |  |--agentlessd.c
|  |  |--agentlessd.h
|  |  |--main.c
|  |  |--README
|  |  |--scripts
|  |  |  |--main.exp
|  |  |  |--register_host.sh
|  |  |  |--ssh_asa-fwsmconfig_diff
|  |  |  |--ssh.exp
|  |  |  |--ssh_foundry_diff
|  |  |  |--ssh_generic_diff
|  |  |  |--ssh_integrity_check_bsd
|  |  |  |--ssh_integrity_check_linux
|  |  |  |--sshlogin.exp
|  |  |  |--ssh_nopass.exp
|  |  |  |--ssh_pixconfig_diff
|  |  |  |--su.exp
|  |--analysisd
|  |  |--accumulator.c
|  |  |--accumulator.h
|  |  |--active-response.c
|  |  |--active-response.h
|  |  |--alerts
|  |  |  |--alerts.h
|  |  |  |--exec.c
|  |  |  |--exec.h
|  |  |  |--getloglocation.c
|  |  |  |--getloglocation.h
|  |  |  |--log.c
|  |  |  |--log.h
|  |  |--analysisd.c
|  |  |--analysisd.h
|  |  |--cdb
|  |  |  |--cdb.c
|  |  |  |--cdb.h
|  |  |  |--cdb_hash.c
|  |  |  |--cdb_make.c
|  |  |  |--cdb_make.h
|  |  |  |--uint32.h
|  |  |  |--uint32_pack.c
|  |  |  |--uint32_unpack.c
|  |  |--cleanevent.c
|  |  |--cleanevent.h
|  |  |--compiled_rules
|  |  |  |--.function_list
|  |  |  |--generic_samples.c
|  |  |  |--register_rule.sh
|  |  |--config.c
|  |  |--config.h
|  |  |--decoders
|  |  |  |--decoder.c
|  |  |  |--decoder.h
|  |  |  |--decoders_list.c
|  |  |  |--decode-xml.c
|  |  |  |--geoip.c
|  |  |  |--hostinfo.c
|  |  |  |--plugin_decoders.c
|  |  |  |--plugin_decoders.h
|  |  |  |--plugins
|  |  |  |  |--ossecalert_decoder.c
|  |  |  |  |--pf_decoder.c
|  |  |  |  |--sonicwall_decoder.c
|  |  |  |  |--symantecws_decoder.c
|  |  |  |--rootcheck.c
|  |  |  |--syscheck.c
|  |  |--dodiff.c
|  |  |--dodiff.h
|  |  |--eventinfo.c
|  |  |--eventinfo.h
|  |  |--eventinfo_list.c
|  |  |--format
|  |  |  |--json_extended.c
|  |  |  |--json_extended.h
|  |  |  |--to_json.c
|  |  |  |--to_json.h
|  |  |--fts.c
|  |  |--fts.h
|  |  |--lists.c
|  |  |--lists.h
|  |  |--lists_list.c
|  |  |--lists_make.c
|  |  |--lists_make.h
|  |  |--makelists.c
|  |  |--output
|  |  |  |--jsonout.c
|  |  |  |--jsonout.h
|  |  |  |--prelude.c
|  |  |  |--prelude.h
|  |  |  |--zeromq.c
|  |  |  |--zeromq.h
|  |  |--rules.c
|  |  |--rules.h
|  |  |--rules_list.c
|  |  |--schemas
|  |  |  |--md5_ignore_sqlite3.schema
|  |  |--stats.c
|  |  |--stats.h
|  |  |--testrule.c
|  |--client-agent
|  |  |--agentd.c
|  |  |--agentd.h
|  |  |--config.c
|  |  |--COPYRIGHT
|  |  |--event-forward.c
|  |  |--intcheck_op.c
|  |  |--main.c
|  |  |--notify.c
|  |  |--receiver.c
|  |  |--receiver-win.c
|  |  |--sendmsg.c
|  |  |--start_agent.c
|  |  |--VERSION
|  |--config
|  |  |--active-response.c
|  |  |--active-response.h
|  |  |--agentlessd-config.c
|  |  |--agentlessd-config.h
|  |  |--alerts-config.c
|  |  |--client-config.c
|  |  |--client-config.h
|  |  |--config.c
|  |  |--config.h
|  |  |--csyslogd-config.c
|  |  |--csyslogd-config.h
|  |  |--dbd-config.c
|  |  |--dbd-config.h
|  |  |--email-alerts-config.c
|  |  |--global-config.c
|  |  |--global-config.h
|  |  |--localfile-config.c
|  |  |--localfile-config.h
|  |  |--mail-config.h
|  |  |--remote-config.c
|  |  |--remote-config.h
|  |  |--reports-config.c
|  |  |--reports-config.h
|  |  |--rootcheck-config.c
|  |  |--rootcheck-config.h
|  |  |--rules-config.c
|  |  |--syscheck-config.c
|  |  |--syscheck-config.h
|  |--error_messages
|  |  |--error_messages.h
|  |--external
|  |  |--cJSON
|  |  |  |--cJSON.c
|  |  |  |--cJSON.h
|  |  |  |--LICENSE
|  |  |  |--README
|  |  |  |--README.md
|  |  |  |--test.c
|  |  |  |--tests
|  |  |  |  |--test1
|  |  |  |  |--test2
|  |  |  |  |--test3
|  |  |  |  |--test4
|  |  |  |  |--test5
|  |  |--compat
|  |  |  |--imsg-buffer.c
|  |  |  |--imsg.c
|  |  |  |--imsg.h
|  |  |  |--includes.h
|  |  |  |--setproctitle.c
|  |  |  |--strlcat.c
|  |  |  |--strlcpy.c
|  |  |--lua
|  |  |--lua-5.2.3
|  |  |  |--doc
|  |  |  |  |--contents.html
|  |  |  |  |--logo.gif
|  |  |  |  |--lua.1
|  |  |  |  |--luac.1
|  |  |  |  |--lua.css
|  |  |  |  |--manual.css
|  |  |  |  |--manual.html
|  |  |  |  |--osi-certified-72x60.png
|  |  |  |  |--readme.html
|  |  |  |--Makefile
|  |  |  |--README
|  |  |  |--src
|  |  |  |  |--lapi.c
|  |  |  |  |--lapi.h
|  |  |  |  |--lauxlib.c
|  |  |  |  |--lauxlib.h
|  |  |  |  |--lbaselib.c
|  |  |  |  |--lbitlib.c
|  |  |  |  |--lcode.c
|  |  |  |  |--lcode.h
|  |  |  |  |--lcorolib.c
|  |  |  |  |--lctype.c
|  |  |  |  |--lctype.h
|  |  |  |  |--ldblib.c
|  |  |  |  |--ldebug.c
|  |  |  |  |--ldebug.h
|  |  |  |  |--ldo.c
|  |  |  |  |--ldo.h
|  |  |  |  |--ldump.c
|  |  |  |  |--lfs.c
|  |  |  |  |--lfs.def
|  |  |  |  |--lfs.h
|  |  |  |  |--lfunc.c
|  |  |  |  |--lfunc.h
|  |  |  |  |--lgc.c
|  |  |  |  |--lgc.h
|  |  |  |  |--linit.c
|  |  |  |  |--liolib.c
|  |  |  |  |--llex.c
|  |  |  |  |--llex.h
|  |  |  |  |--llimits.h
|  |  |  |  |--lmathlib.c
|  |  |  |  |--lmem.c
|  |  |  |  |--lmem.h
|  |  |  |  |--loadlib.c
|  |  |  |  |--lobject.c
|  |  |  |  |--lobject.h
|  |  |  |  |--lopcodes.c
|  |  |  |  |--lopcodes.h
|  |  |  |  |--loslib.c
|  |  |  |  |--lparser.c
|  |  |  |  |--lparser.h
|  |  |  |  |--lstate.c
|  |  |  |  |--lstate.h
|  |  |  |  |--lstring.c
|  |  |  |  |--lstring.h
|  |  |  |  |--lstrlib.c
|  |  |  |  |--ltable.c
|  |  |  |  |--ltable.h
|  |  |  |  |--ltablib.c
|  |  |  |  |--ltm.c
|  |  |  |  |--ltm.h
|  |  |  |  |--lua.c
|  |  |  |  |--luac.c
|  |  |  |  |--luaconf.h
|  |  |  |  |--lua.h
|  |  |  |  |--lua.hpp
|  |  |  |  |--lualib.h
|  |  |  |  |--lundump.c
|  |  |  |  |--lundump.h
|  |  |  |  |--lvm.c
|  |  |  |  |--lvm.h
|  |  |  |  |--lzio.c
|  |  |  |  |--lzio.h
|  |  |  |  |--Makefile
|  |  |  |  |--Makefile.mingw
|  |  |--zlib-1.2.11
|  |  |  |--adler32.c
|  |  |  |--amiga
|  |  |  |  |--Makefile.pup
|  |  |  |  |--Makefile.sas
|  |  |  |--ChangeLog
|  |  |  |--CMakeLists.txt
|  |  |  |--compress.c
|  |  |  |--configure
|  |  |  |--contrib
|  |  |  |  |--ada
|  |  |  |  |  |--buffer_demo.adb
|  |  |  |  |  |--mtest.adb
|  |  |  |  |  |--read.adb
|  |  |  |  |  |--readme.txt
|  |  |  |  |  |--test.adb
|  |  |  |  |  |--zlib.adb
|  |  |  |  |  |--zlib.ads
|  |  |  |  |  |--zlib.gpr
|  |  |  |  |  |--zlib-streams.adb
|  |  |  |  |  |--zlib-streams.ads
|  |  |  |  |  |--zlib-thin.adb
|  |  |  |  |  |--zlib-thin.ads
|  |  |  |  |--amd64
|  |  |  |  |  |--amd64-match.S
|  |  |  |  |--asm686
|  |  |  |  |  |--match.S
|  |  |  |  |  |--README.686
|  |  |  |  |--blast
|  |  |  |  |  |--blast.c
|  |  |  |  |  |--blast.h
|  |  |  |  |  |--Makefile
|  |  |  |  |  |--README
|  |  |  |  |  |--test.pk
|  |  |  |  |  |--test.txt
|  |  |  |  |--delphi
|  |  |  |  |  |--readme.txt
|  |  |  |  |  |--ZLibConst.pas
|  |  |  |  |  |--zlibd32.mak
|  |  |  |  |  |--ZLib.pas
|  |  |  |  |--dotzlib
|  |  |  |  |  |--DotZLib
|  |  |  |  |  |  |--AssemblyInfo.cs
|  |  |  |  |  |--DotZLib.build
|  |  |  |  |  |  |--ChecksumImpl.cs
|  |  |  |  |  |--DotZLib.chm
|  |  |  |  |  |  |--CircularBuffer.cs
|  |  |  |  |  |  |--CodecBase.cs
|  |  |  |  |  |  |--Deflater.cs
|  |  |  |  |  |  |--DotZLib.cs
|  |  |  |  |  |  |--DotZLib.csproj
|  |  |  |  |  |  |--GZipStream.cs
|  |  |  |  |  |  |--Inflater.cs
|  |  |  |  |  |--DotZLib.sln
|  |  |  |  |  |  |--UnitTests.cs
|  |  |  |  |  |--LICENSE_1_0.txt
|  |  |  |  |  |--readme.txt
|  |  |  |  |--gcc_gvmat64
|  |  |  |  |  |--gvmat64.S
|  |  |  |  |--infback9
|  |  |  |  |  |--infback9.c
|  |  |  |  |  |--infback9.h
|  |  |  |  |  |--inffix9.h
|  |  |  |  |  |--inflate9.h
|  |  |  |  |  |--inftree9.c
|  |  |  |  |  |--inftree9.h
|  |  |  |  |  |--README
|  |  |  |  |--inflate86
|  |  |  |  |  |--inffas86.c
|  |  |  |  |  |--inffast.S
|  |  |  |  |--iostream
|  |  |  |  |--iostream2
|  |  |  |  |  |--zstream.h
|  |  |  |  |  |--zstream_test.cpp
|  |  |  |  |--iostream3
|  |  |  |  |  |--README
|  |  |  |  |  |--test.cc
|  |  |  |  |  |--TODO
|  |  |  |  |  |--zfstream.cc
|  |  |  |  |  |--zfstream.h
|  |  |  |  |  |--test.cpp
|  |  |  |  |  |--zfstream.cpp
|  |  |  |  |  |--zfstream.h
|  |  |  |  |--masmx64
|  |  |  |  |  |--bld_ml64.bat
|  |  |  |  |  |--gvmat64.asm
|  |  |  |  |  |--inffas8664.c
|  |  |  |  |  |--inffasx64.asm
|  |  |  |  |  |--readme.txt
|  |  |  |  |--masmx86
|  |  |  |  |  |--bld_ml32.bat
|  |  |  |  |  |--inffas32.asm
|  |  |  |  |  |--match686.asm
|  |  |  |  |  |--readme.txt
|  |  |  |  |--minizip
|  |  |  |  |  |--configure.ac
|  |  |  |  |  |--crypt.h
|  |  |  |  |  |--ioapi.c
|  |  |  |  |  |--ioapi.h
|  |  |  |  |  |--iowin32.c
|  |  |  |  |  |--iowin32.h
|  |  |  |  |  |--Makefile
|  |  |  |  |  |--Makefile.am
|  |  |  |  |  |--make_vms.com
|  |  |  |  |  |--miniunz.c
|  |  |  |  |  |--miniunzip.1
|  |  |  |  |  |--minizip.1
|  |  |  |  |  |--MiniZip64_Changes.txt
|  |  |  |  |  |--MiniZip64_info.txt
|  |  |  |  |  |--minizip.c
|  |  |  |  |  |--minizip.pc.in
|  |  |  |  |  |--mztools.c
|  |  |  |  |  |--mztools.h
|  |  |  |  |  |--unzip.c
|  |  |  |  |  |--unzip.h
|  |  |  |  |  |--zip.c
|  |  |  |  |  |--zip.h
|  |  |  |  |--pascal
|  |  |  |  |  |--example.pas
|  |  |  |  |  |--readme.txt
|  |  |  |  |  |--zlibd32.mak
|  |  |  |  |  |--zlibpas.pas
|  |  |  |  |--puff
|  |  |  |  |  |--Makefile
|  |  |  |  |  |--puff.c
|  |  |  |  |  |--puff.h
|  |  |  |  |  |--pufftest.c
|  |  |  |  |  |--README
|  |  |  |  |  |--zeros.raw
|  |  |  |  |--README.contrib
|  |  |  |  |--testzlib
|  |  |  |  |  |--testzlib.c
|  |  |  |  |  |--testzlib.txt
|  |  |  |  |--untgz
|  |  |  |  |  |--Makefile
|  |  |  |  |  |--Makefile.msc
|  |  |  |  |  |--untgz.c
|  |  |  |  |--vstudio
|  |  |  |  |  |--readme.txt
|  |  |  |  |  |--vc10
|  |  |  |  |  |  |--miniunz.vcxproj
|  |  |  |  |  |  |--miniunz.vcxproj.filters
|  |  |  |  |  |  |--minizip.vcxproj
|  |  |  |  |  |  |--minizip.vcxproj.filters
|  |  |  |  |  |  |--testzlibdll.vcxproj
|  |  |  |  |  |  |--testzlibdll.vcxproj.filters
|  |  |  |  |  |  |--testzlib.vcxproj
|  |  |  |  |  |  |--testzlib.vcxproj.filters
|  |  |  |  |  |  |--zlib.rc
|  |  |  |  |  |  |--zlibstat.vcxproj
|  |  |  |  |  |  |--zlibstat.vcxproj.filters
|  |  |  |  |  |  |--zlibvc.def
|  |  |  |  |  |  |--zlibvc.sln
|  |  |  |  |  |  |--zlibvc.vcxproj
|  |  |  |  |  |  |--zlibvc.vcxproj.filters
|  |  |  |  |  |--vc11
|  |  |  |  |  |  |--miniunz.vcxproj
|  |  |  |  |  |  |--minizip.vcxproj
|  |  |  |  |  |  |--testzlibdll.vcxproj
|  |  |  |  |  |  |--testzlib.vcxproj
|  |  |  |  |  |  |--zlib.rc
|  |  |  |  |  |  |--zlibstat.vcxproj
|  |  |  |  |  |  |--zlibvc.def
|  |  |  |  |  |  |--zlibvc.sln
|  |  |  |  |  |  |--zlibvc.vcxproj
|  |  |  |  |  |--vc12
|  |  |  |  |  |  |--miniunz.vcxproj
|  |  |  |  |  |  |--minizip.vcxproj
|  |  |  |  |  |  |--testzlibdll.vcxproj
|  |  |  |  |  |  |--testzlib.vcxproj
|  |  |  |  |  |  |--zlib.rc
|  |  |  |  |  |  |--zlibstat.vcxproj
|  |  |  |  |  |  |--zlibvc.def
|  |  |  |  |  |  |--zlibvc.sln
|  |  |  |  |  |  |--zlibvc.vcxproj
|  |  |  |  |  |--vc14
|  |  |  |  |  |  |--miniunz.vcxproj
|  |  |  |  |  |  |--minizip.vcxproj
|  |  |  |  |  |  |--testzlibdll.vcxproj
|  |  |  |  |  |  |--testzlib.vcxproj
|  |  |  |  |  |  |--zlib.rc
|  |  |  |  |  |  |--zlibstat.vcxproj
|  |  |  |  |  |  |--zlibvc.def
|  |  |  |  |  |  |--zlibvc.sln
|  |  |  |  |  |  |--zlibvc.vcxproj
|  |  |  |  |  |--vc9
|  |  |  |  |  |  |--miniunz.vcproj
|  |  |  |  |  |  |--minizip.vcproj
|  |  |  |  |  |  |--testzlibdll.vcproj
|  |  |  |  |  |  |--testzlib.vcproj
|  |  |  |  |  |  |--zlib.rc
|  |  |  |  |  |  |--zlibstat.vcproj
|  |  |  |  |  |  |--zlibvc.def
|  |  |  |  |  |  |--zlibvc.sln
|  |  |  |  |  |  |--zlibvc.vcproj
|  |  |  |--crc32.c
|  |  |  |--crc32.h
|  |  |  |--deflate.c
|  |  |  |--deflate.h
|  |  |  |--doc
|  |  |  |  |--algorithm.txt
|  |  |  |  |--rfc1950.txt
|  |  |  |  |--rfc1951.txt
|  |  |  |  |--rfc1952.txt
|  |  |  |  |--txtvsbin.txt
|  |  |  |--examples
|  |  |  |  |--enough.c
|  |  |  |  |--fitblk.c
|  |  |  |  |--gun.c
|  |  |  |  |--gzappend.c
|  |  |  |  |--gzjoin.c
|  |  |  |  |--gzlog.c
|  |  |  |  |--gzlog.h
|  |  |  |  |--README.examples
|  |  |  |  |--zlib_how.html
|  |  |  |  |--zpipe.c
|  |  |  |  |--zran.c
|  |  |  |--FAQ
|  |  |  |--gzclose.c
|  |  |  |--gzguts.h
|  |  |  |--gzlib.c
|  |  |  |--gzread.c
|  |  |  |--gzwrite.c
|  |  |  |--INDEX
|  |  |  |--infback.c
|  |  |  |--inffast.c
|  |  |  |--inffast.h
|  |  |  |--inffixed.h
|  |  |  |--inflate.c
|  |  |  |--inflate.h
|  |  |  |--inftrees.c
|  |  |  |--inftrees.h
|  |  |  |--Makefile
|  |  |  |--Makefile.in
|  |  |  |--make_vms.com
|  |  |  |--msdos
|  |  |  |  |--Makefile.bor
|  |  |  |  |--Makefile.dj2
|  |  |  |  |--Makefile.emx
|  |  |  |  |--Makefile.msc
|  |  |  |  |--Makefile.tc
|  |  |  |--nintendods
|  |  |  |  |--Makefile
|  |  |  |  |--README
|  |  |  |--old
|  |  |  |  |--descrip.mms
|  |  |  |  |--Makefile.emx
|  |  |  |  |--Makefile.riscos
|  |  |  |  |--os2
|  |  |  |  |  |--Makefile.os2
|  |  |  |  |  |--zlib.def
|  |  |  |  |--README
|  |  |  |  |--visual-basic.txt
|  |  |  |--os400
|  |  |  |  |--bndsrc
|  |  |  |  |--make.sh
|  |  |  |  |--README400
|  |  |  |  |--zlib.inc
|  |  |  |--qnx
|  |  |  |  |--package.qpg
|  |  |  |--README
|  |  |  |--test
|  |  |  |  |--example.c
|  |  |  |  |--infcover.c
|  |  |  |  |--minigzip.c
|  |  |  |--treebuild.xml
|  |  |  |--trees.c
|  |  |  |--trees.h
|  |  |  |--uncompr.c
|  |  |  |--watcom
|  |  |  |  |--watcom_f.mak
|  |  |  |  |--watcom_l.mak
|  |  |  |--win32
|  |  |  |  |--DLL_FAQ.txt
|  |  |  |  |--Makefile.bor
|  |  |  |  |--Makefile.gcc
|  |  |  |  |--Makefile.msc
|  |  |  |  |--README-WIN32.txt
|  |  |  |  |--VisualC.txt
|  |  |  |  |--zlib1.rc
|  |  |  |  |--zlib.def
|  |  |  |--zconf.h
|  |  |  |--zconf.h.cmakein
|  |  |  |--zconf.h.in
|  |  |  |--zlib2ansi
|  |  |  |--zlib.3
|  |  |  |--zlib.3.pdf
|  |  |  |--zlib.h
|  |  |  |--zlib.map
|  |  |  |--zlib.pc.cmakein
|  |  |  |--zlib.pc.in
|  |  |  |--zutil.c
|  |  |  |--zutil.h
|  |--headers
|  |  |--agent_op.h
|  |  |--ar.h
|  |  |--custom_output_search.h
|  |  |--debug_op.h
|  |  |--defs.h
|  |  |--dirtree_op.h
|  |  |--file_op.h
|  |  |--file-queue.h
|  |  |--fs_op.h
|  |  |--hash_op.h
|  |  |--help.h
|  |  |--list_op.h
|  |  |--math_op.h
|  |  |--mem_op.h
|  |  |--mq_op.h
|  |  |--os_err.h
|  |  |--privsep_op.h
|  |  |--pthreads_op.h
|  |  |--randombytes.h
|  |  |--rc.h
|  |  |--read-agents.h
|  |  |--read-alert.h
|  |  |--regex_op.h
|  |  |--report_op.h
|  |  |--rules_op.h
|  |  |--sec.h
|  |  |--shared.h
|  |  |--sig_op.h
|  |  |--store_op.h
|  |  |--string_op.h
|  |  |--validate_op.h
|  |  |--wait_op.h
|  |--init
|  |  |--adduser.sh
|  |  |--darwin-addusers.pl
|  |  |--darwin-init.sh
|  |  |--functions.sh
|  |  |--fw-check.sh
|  |  |--init.sh
|  |  |--language.sh
|  |  |--ossec-client.sh
|  |  |--ossec-hids-aix.init
|  |  |--ossec-hids-alpine.init
|  |  |--ossec-hids-debian.init
|  |  |--ossec-hids-gentoo.init
|  |  |--ossec-hids.init
|  |  |--ossec-hids-rh.init
|  |  |--ossec-hids-solaris.init
|  |  |--ossec-hids-suse.init
|  |  |--ossec-local.sh
|  |  |--ossec-server.sh
|  |  |--osx105-addusers.sh
|  |  |--shared.sh
|  |  |--update.sh
|  |--LOCATION
|  |--logcollector
|  |  |--config.c
|  |  |--COPYRIGHT
|  |  |--logcollector.c
|  |  |--logcollector.h
|  |  |--main.c
|  |  |--read_audit.c
|  |  |--read_command.c
|  |  |--read_djb_multilog.c
|  |  |--read_fullcommand.c
|  |  |--read_journald.c
|  |  |--read_mssql_log.c
|  |  |--read_multiline.c
|  |  |--read_multiline_indented.c
|  |  |--read_mysql_log.c
|  |  |--read_nmapg.c
|  |  |--read_ossecalert.c
|  |  |--read_postgresql_log.c
|  |  |--read_snortfull.c
|  |  |--read_syslog.c
|  |  |--read_win_el.c
|  |  |--read_win_event_channel.c
|  |  |--VERSION
|  |--Makefile
|  |--monitord
|  |  |--compress_log.c
|  |  |--generate_reports.c
|  |  |--main.c
|  |  |--manage_files.c
|  |  |--monitor_agents.c
|  |  |--monitord.c
|  |  |--monitord.h
|  |  |--sendcustomemail.c
|  |  |--sign_log.c
|  |--os_auth
|  |  |--auth.h
|  |  |--check_cert.c
|  |  |--check_cert.h
|  |  |--main-client.c
|  |  |--main-server.c
|  |  |--ssl.c
|  |  |--ssl-test.c
|  |--os_crypto
|  |  |--blowfish
|  |  |  |--bf_enc.c
|  |  |  |--bf_locl.h
|  |  |  |--bf_op.c
|  |  |  |--bf_op.h
|  |  |  |--bf_pi.h
|  |  |  |--bf_skey.c
|  |  |  |--blowfish.h
|  |  |  |--main.c
|  |  |--md5
|  |  |  |--main.c
|  |  |  |--md5.c
|  |  |  |--md5.h
|  |  |  |--md5_op.c
|  |  |  |--md5_op.h
|  |  |--md5_sha1
|  |  |  |--main.c
|  |  |  |--md5_sha1_op.c
|  |  |  |--md5_sha1_op.h
|  |  |--sha1
|  |  |  |--main.c
|  |  |  |--md32_common.h
|  |  |  |--sha1_op.c
|  |  |  |--sha1_op.h
|  |  |  |--sha.h
|  |  |  |--sha_locl.h
|  |  |--shared
|  |  |  |--keys.c
|  |  |  |--msgs.c
|  |--os_csyslogd
|  |  |--alert.c
|  |  |--config.c
|  |  |--csyslogd.c
|  |  |--csyslogd.h
|  |  |--main.c
|  |--os_dbd
|  |  |--alert.c
|  |  |--config.c
|  |  |--convert-db-ipv6.sql
|  |  |--dbd.c
|  |  |--dbd.h
|  |  |--dbd_help.c
|  |  |--dbmake.sh
|  |  |--db_op.c
|  |  |--db_op.h
|  |  |--main.c
|  |  |--mysql.schema
|  |  |--postgresql.schema
|  |  |--README
|  |  |--rules.c
|  |  |--server.c
|  |--os_execd
|  |  |--config.c
|  |  |--exec.c
|  |  |--execd.c
|  |  |--execd.h
|  |  |--win_execd.c
|  |--os_maild
|  |  |--config.c
|  |  |--maild.c
|  |  |--maild.h
|  |  |--mail_list.c
|  |  |--mail_list.h
|  |  |--os_maild_client.c
|  |  |--sendcustomemail.c
|  |  |--sendmail.c
|  |--os_net
|  |  |--COPYRIGHT
|  |  |--os_net.c
|  |  |--os_net.h
|  |  |--VERSION
|  |--os_regex
|  |  |--COPYRIGHT
|  |  |--examples
|  |  |  |--Makefile
|  |  |  |--match.c
|  |  |  |--regex.c
|  |  |  |--regex_str.c
|  |  |  |--run.sh
|  |  |  |--tests
|  |  |  |  |--false.regex
|  |  |  |  |--false.tests
|  |  |  |  |--str.regex
|  |  |  |  |--true.regex
|  |  |  |  |--true.tests
|  |  |  |--validate.pl
|  |  |--os_converter.c
|  |  |--os_match.c
|  |  |--os_match_compile.c
|  |  |--os_match_execute.c
|  |  |--os_match_free_pattern.c
|  |  |--os_pcre2.c
|  |  |--os_pcre2_compile.c
|  |  |--os_pcre2_execute.c
|  |  |--os_pcre2_free_pattern.c
|  |  |--os_pcre2_free_substrings.c
|  |  |--os_regex.c
|  |  |--os_regex_compile.c
|  |  |--os_regex_execute.c
|  |  |--os_regex_free_pattern.c
|  |  |--os_regex_free_substrings.c
|  |  |--os_regex.h
|  |  |--os_regex_internal.h
|  |  |--os_regex_maps.c
|  |  |--os_regex_match.c
|  |  |--os_regex_startswith.c
|  |  |--os_regex_strbreak.c
|  |  |--os_regex_str.c
|  |  |--README
|  |  |--VERSION
|  |--os_xml
|  |  |--COPYRIGHT
|  |  |--examples
|  |  |  |--mem_test.c
|  |  |  |--test.c
|  |  |  |--test.xml
|  |  |--os_xml_access.c
|  |  |--os_xml.c
|  |  |--os_xml.h
|  |  |--os_xml_internal.h
|  |  |--os_xml_node_access.c
|  |  |--os_xml_variables.c
|  |  |--os_xml_writer.c
|  |  |--README
|  |  |--VERSION
|  |--os_zlib
|  |  |--os_zlib.c
|  |  |--os_zlib.h
|  |  |--zlib-test.c
|  |--remoted
|  |  |--ar-forward.c
|  |  |--config.c
|  |  |--COPYRIGHT
|  |  |--main.c
|  |  |--manager.c
|  |  |--README
|  |  |--remoted.c
|  |  |--remoted.h
|  |  |--secure.c
|  |  |--sendmsg.c
|  |  |--syslog.c
|  |  |--syslogtcp.c
|  |  |--VERSION
|  |--reportd
|  |  |--report.c
|  |--rootcheck
|  |  |--check_open_ports.c
|  |  |--check_rc_dev.c
|  |  |--check_rc_files.c
|  |  |--check_rc_if.c
|  |  |--check_rc_pids.c
|  |  |--check_rc_policy.c
|  |  |--check_rc_ports.c
|  |  |--check_rc_readproc.c
|  |  |--check_rc_sys.c
|  |  |--check_rc_trojans.c
|  |  |--common.c
|  |  |--common_rcl.c
|  |  |--config.c
|  |  |--db
|  |  |  |--acsc_office2016_rcl.txt
|  |  |  |--cis_apache2224_rcl.txt
|  |  |  |--cis_debianlinux7-8_L1_rcl.txt
|  |  |  |--cis_debianlinux7-8_L2_rcl.txt
|  |  |  |--cis_debian_linux_rcl.txt
|  |  |  |--cis_mysql5-6_community_rcl.txt
|  |  |  |--cis_mysql5-6_enterprise_rcl.txt
|  |  |  |--cis_rhel5_linux_rcl.txt
|  |  |  |--cis_rhel6_linux_rcl.txt
|  |  |  |--cis_rhel7_linux_rcl.txt
|  |  |  |--cis_rhel_linux_rcl.txt
|  |  |  |--cis_sles11_linux_rcl.txt
|  |  |  |--cis_sles12_linux_rcl.txt
|  |  |  |--cis_solaris11_rcl.txt
|  |  |  |--cis_win10_enterprise_L1_rcl.txt
|  |  |  |--cis_win10_enterprise_L2_rcl.txt
|  |  |  |--cis_win2012r2_domainL1_rcl.txt
|  |  |  |--cis_win2012r2_domainL2_rcl.txt
|  |  |  |--cis_win2012r2_memberL1_rcl.txt
|  |  |  |--cis_win2012r2_memberL2_rcl.txt
|  |  |  |--cis_win2016_domainL1_rcl.txt
|  |  |  |--cis_win2016_domainL2_rcl.txt
|  |  |  |--cis_win2016_memberL1_rcl.txt
|  |  |  |--cis_win2016_memberL2_rcl.txt
|  |  |  |--rootkit_files.txt
|  |  |  |--rootkit_trojans.txt
|  |  |  |--system_audit_pw.txt
|  |  |  |--system_audit_rcl.txt
|  |  |  |--system_audit_ssh.txt
|  |  |  |--win_applications_rcl.txt
|  |  |  |--win_audit_rcl.txt
|  |  |  |--win_malware_rcl.txt
|  |  |--os_string.c
|  |  |--rootcheck.c
|  |  |--rootcheck.conf
|  |  |--rootcheck-config.c
|  |  |--rootcheck.h
|  |  |--run_rk_check.c
|  |  |--unix-process.c
|  |  |--util
|  |  |  |--ads_dump.c
|  |  |--win-common.c
|  |  |--win-process.c
|  |--shared
|  |  |--agent_op.c
|  |  |--custom_output_search_replace.c
|  |  |--debug_op.c
|  |  |--dirtree_op.c
|  |  |--file_op.c
|  |  |--file-queue.c
|  |  |--fs_op.c
|  |  |--hash_op.c
|  |  |--help.c
|  |  |--list_op.c
|  |  |--math_op.c
|  |  |--mem_op.c
|  |  |--mq_op.c
|  |  |--privsep_op.c
|  |  |--pthreads_op.c
|  |  |--randombytes.c
|  |  |--read-agents.c
|  |  |--read-alert.c
|  |  |--regex_op.c
|  |  |--report_op.c
|  |  |--rules_op.c
|  |  |--sig_op.c
|  |  |--store_op.c
|  |  |--string_op.c
|  |  |--tests
|  |  |  |--hash_test.c
|  |  |  |--ip_test.c
|  |  |  |--Makefile
|  |  |  |--merge_test.c
|  |  |  |--prime_test.c
|  |  |  |--string_test.c
|  |  |--validate_op.c
|  |  |--wait_op.c
|  |--syscheckd
|  |  |--config.c
|  |  |--create_db.c
|  |  |--run_check.c
|  |  |--run_realtime.c
|  |  |--seechanges.c
|  |  |--syscheck.c
|  |  |--syscheck.h
|  |  |--win-registry.c
|  |--systemd
|  |  |--agent
|  |  |  |--ossec-agentd.service
|  |  |  |--ossec-agent.target
|  |  |  |--ossec-execd.service
|  |  |  |--ossec-logcollector.service
|  |  |  |--ossec-syscheckd.service
|  |  |--server
|  |  |  |--ossec-agentless.service
|  |  |  |--ossec-analysisd.service
|  |  |  |--ossec-csyslog.service
|  |  |  |--ossec-dbd.service
|  |  |  |--ossec-execd.service
|  |  |  |--ossec-logcollector.service
|  |  |  |--ossec-maild.service
|  |  |  |--ossec-monitord.service
|  |  |  |--ossec-remoted.service
|  |  |  |--ossec-server.target
|  |  |  |--ossec-syscheckd.service
|  |--tests
|  |  |--test_os_crypto.c
|  |  |--test_os_net.c
|  |  |--test_os_regex.c
|  |  |--test_os_xml.c
|  |  |--test_os_zlib.c
|  |  |--test_shared.c
|  |  |--valgrind.supp
|  |--util
|  |  |--agent_control.c
|  |  |--clear_stats.c
|  |  |--list_agents.c
|  |  |--ossec-regex.c
|  |  |--ossec-regex-convert.c
|  |  |--rootcheck_control.c
|  |  |--syscheck_control.c
|  |  |--syscheck_update.c
|  |  |--verify-agent-conf.c
|  |--VERSION
|  |--win32
|  |  |--add-localfile.c
|  |  |--agent_auth.c
|  |  |--doc.html
|  |  |--favicon.ico
|  |  |--help.txt
|  |  |--icofile.rc
|  |  |--nsProcess
|  |  |  |--nsProcess.dll
|  |  |  |--nsProcess.nsh
|  |  |--ossec.conf
|  |  |--ossec-installer.nsi
|  |  |--ossec-uninstall.ico
|  |  |--os_win.h
|  |  |--read-registry.c
|  |  |--setup-iis.c
|  |  |--setup-shared.c
|  |  |--setup-shared.h
|  |  |--setup-syscheck.c
|  |  |--setup-win.c
|  |  |--SimpleSC
|  |  |  |--SimpleSC.dll
|  |  |--ui
|  |  |  |--common.c
|  |  |  |--favicon.ico
|  |  |  |--os_win32ui.c
|  |  |  |--os_win32ui.exe.manifest
|  |  |  |--os_win32ui.h
|  |  |  |--win32ui.rc
|  |  |--unix2dos.pl
|  |  |--vista_sec.txt
|  |  |--win_agent.c
|  |  |--win_service.c
|--SUPPORT.md
|--.travis.yml
[ec2-user@ip-172-31-49-206 ossec-hids-master]$
```
#おわりに
今回は以上です。次から中身を見ていきます。