etc/ossec-init.conf
etc/init.d/ossec-hids
var/ossec/rules/local_rules.xml
var/ossec/etc/ossec.conf
var/ossec/etc/internal_options.conf