127.0.0.1 7200 /etc,/usr/bin,/usr/sbin /bin,/sbin,/boot /etc/mtab /etc/hosts.deny /etc/mail/statistics /etc/random-seed /etc/adjtime /etc/ntp/drift /var/ossec/etc/shared/rootkit_files.txt /var/ossec/etc/shared/rootkit_trojans.txt /var/ossec/etc/shared/system_audit_rcl.txt /var/ossec/etc/shared/cis_debian_linux_rcl.txt /var/ossec/etc/shared/cis_rhel_linux_rcl.txt /var/ossec/etc/shared/cis_rhel5_linux_rcl.txt /var/ossec/etc/shared/cis_rhel6_linux_rcl.txt /var/ossec/etc/shared/cis_rhel7_linux_rcl.txt syslog /var/log/messages syslog /var/log/syslog syslog /var/log/debug syslog /var/log/secure syslog /var/log/cron syslog /var/log/maillog syslog /var/log/spooler apache /var/log/httpd/access_log apache /var/log/httpd/error_log command df -h full_command netstat -tan | grep LISTEN | grep -v 127.0.0.1 | sort full_command last -n 5 full_command lastb -n 5