Content of RPM ossec-hids-client-3.7.0-ill15400.40.11.x86_64.rpm :
/var/lib/ossec/active-response/bin/cloudflare-ban.sh
/var/lib/ossec/active-response/bin/disable-account.sh
/var/lib/ossec/active-response/bin/firewall-drop.sh
/var/lib/ossec/active-response/bin/firewalld-drop.sh
/var/lib/ossec/active-response/bin/host-deny.sh
/var/lib/ossec/active-response/bin/ip-customblock.sh
/var/lib/ossec/active-response/bin/nftables-drop.sh
/var/lib/ossec/active-response/bin/ossec-aws-waf.sh
/var/lib/ossec/active-response/bin/ossec-pagerduty.sh
/var/lib/ossec/active-response/bin/ossec-slack.sh
/var/lib/ossec/active-response/bin/ossec-tweeter.sh
/var/lib/ossec/active-response/bin/restart-ossec.sh
/var/lib/ossec/active-response/bin/route-null.sh
/var/lib/ossec/bin/client-logcollector
/var/lib/ossec/bin/client-syscheckd
/var/lib/ossec/bin/manage_client
/var/lib/ossec/bin/ossec-agentd
/var/lib/ossec/bin/ossec-authd
/var/lib/ossec/bin/ossec-client.sh
/var/lib/ossec/bin/ossec-execd
/var/lib/ossec/bin/ossec-logcollector
/var/lib/ossec/bin/ossec-syscheckd
/var/lib/ossec/etc/internal_options.conf
/var/lib/ossec/etc/ossec-agent.conf
/var/lib/ossec/etc/ossec.conf.sample
/var/lib/ossec/etc/shared/acsc_office2016_rcl.txt
/var/lib/ossec/etc/shared/cis_apache2224_rcl.txt
/var/lib/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/lib/ossec/etc/shared/cis_debianlinux7-8_L1_rcl.txt
/var/lib/ossec/etc/shared/cis_debianlinux7-8_L2_rcl.txt
/var/lib/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/lib/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/lib/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/lib/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/lib/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/lib/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/lib/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/lib/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/lib/ossec/etc/shared/cis_solaris11_rcl.txt
/var/lib/ossec/etc/shared/cis_win10_enterprise_L1_rcl.txt
/var/lib/ossec/etc/shared/cis_win10_enterprise_L2_rcl.txt
/var/lib/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/lib/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/lib/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/lib/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/lib/ossec/etc/shared/cis_win2016_domainL1_rcl.txt
/var/lib/ossec/etc/shared/cis_win2016_domainL2_rcl.txt
/var/lib/ossec/etc/shared/cis_win2016_memberL1_rcl.txt
/var/lib/ossec/etc/shared/cis_win2016_memberL2_rcl.txt
/var/lib/ossec/etc/shared/rootkit_files.txt
/var/lib/ossec/etc/shared/rootkit_trojans.txt
/var/lib/ossec/etc/shared/system_audit_pw.txt
/var/lib/ossec/etc/shared/system_audit_rcl.txt
/var/lib/ossec/etc/shared/system_audit_ssh.txt
/var/lib/ossec/etc/shared/win_applications_rcl.txt
/var/lib/ossec/etc/shared/win_audit_rcl.txt
/var/lib/ossec/etc/shared/win_malware_rcl.txt