Elaborate on OSSEC alert instructions

Addresses #788 
Need to make edits to install.md to account for new document
Add a note saying they should contact us if they believe they system is behaving abnormally. Can use the securedrop email address.