Content of RPM ossec-hids-3.6.0-1.227.x86_64.rpm :
/etc/init.d/ossec-hids
/etc/logrotate.d/ossec-hids
/usr/lib/systemd/system/ossec-hids.service
/usr/sbin/rcossec-hids
/usr/share/doc/packages/ossec-hids
/usr/share/doc/packages/ossec-hids/BUGS
/usr/share/doc/packages/ossec-hids/CONFIG
/usr/share/doc/packages/ossec-hids/INSTALL
/usr/share/doc/packages/ossec-hids/README.md
/var/adm/fillup-templates/sysconfig.ossec-hids
/var/lib/ossec
/var/lib/ossec/active-response
/var/lib/ossec/active-response/bin
/var/lib/ossec/bin
/var/lib/ossec/etc
/var/lib/ossec/etc/shared
/var/lib/ossec/etc/sql
/var/lib/ossec/etc/templates
/var/lib/ossec/etc/templates/active-response.template
/var/lib/ossec/etc/templates/apache-logs.template
/var/lib/ossec/etc/templates/ar-disable-account.template
/var/lib/ossec/etc/templates/ar-firewall-drop.template
/var/lib/ossec/etc/templates/ar-host-deny.template
/var/lib/ossec/etc/templates/ar-routenull.template
/var/lib/ossec/etc/templates/pgsql-logs.template
/var/lib/ossec/etc/templates/rootcheck.template
/var/lib/ossec/etc/templates/rules.template
/var/lib/ossec/etc/templates/snort-logs.template
/var/lib/ossec/etc/templates/syscheck.template
/var/lib/ossec/etc/templates/syslog-logs.template
/var/lib/ossec/logs
/var/lib/ossec/queue
/var/lib/ossec/queue/alerts
/var/lib/ossec/queue/ossec
/var/lib/ossec/queue/rids
/var/lib/ossec/queue/syscheck
/var/lib/ossec/var
/var/lib/ossec/var/run