Add backup script and ossec rules