+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/101
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1101
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1301_1302_1303
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1401
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1402
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1602
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1603
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1607
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1609
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1901
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1902
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1903
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/1905
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/201
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/202
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/204
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/2501
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/2601
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/301
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/401
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/403
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/408
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/409
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/access-control
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/apache-error.logs
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/ciscoios
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/cisco-ios-ids
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/ftpd
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/iis6
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/imapd
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/kernel
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/mail-alerts
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/mail-errors
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/ns1
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/proftpd
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/smbd
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/spamd
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/sshd
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/symantecws
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/telnetd
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/unkown
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/vpn.log
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/vpopmail
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/worms
+ossec-hids: file-in-unusual-dir var/ossec/rules/log-entries/xferlog