/etc/ossec-init.conf
/etc/init.d/ossec-hids
/var/ossec/rules/local_rules.xml
/var/ossec/etc/ossec.conf
/var/ossec/etc/internal_options.conf