%FILES%
usr/
usr/share/
usr/share/sagan-git/
usr/share/sagan-git/rules/
usr/share/sagan-git/rules/imapd.rules
usr/share/sagan-git/rules/windows-normalize.rulebase
usr/share/sagan-git/rules/squid.rules
usr/share/sagan-git/rules/windows-owa.rules
usr/share/sagan-git/rules/rsync.rules
usr/share/sagan-git/rules/honeyd.rules
usr/share/sagan-git/rules/attack.rules
usr/share/sagan-git/rules/juniper-geoip.rules
usr/share/sagan-git/rules/syslog.rules
usr/share/sagan-git/rules/cisco-blacklist.rules
usr/share/sagan-git/rules/openssh-aetas.rules
usr/share/sagan-git/rules/oracle.rules
usr/share/sagan-git/rules/cisco-cucm.rules
usr/share/sagan-git/rules/solaris.rules
usr/share/sagan-git/rules/windows-owa-blacklist.rules
usr/share/sagan-git/rules/cacti-thold.rules
usr/share/sagan-git/rules/imap-normalize.rulebase
usr/share/sagan-git/rules/bluedot-catagories.conf
usr/share/sagan-git/rules/fatpipe-correlated.rules
usr/share/sagan-git/rules/apache.rules
usr/share/sagan-git/rules/sagan-sid-msg.map
usr/share/sagan-git/rules/cisco-prime.rules
usr/share/sagan-git/rules/asterisk.rules
usr/share/sagan-git/rules/proftpd-aetas.rules
usr/share/sagan-git/rules/tripwire.rules
usr/share/sagan-git/rules/sonicwall-normalize.rulebase
usr/share/sagan-git/rules/juniper-aetas.rules
usr/share/sagan-git/rules/riverbed-geoip.rules
usr/share/sagan-git/rules/postgresql.rules
usr/share/sagan-git/rules/cisco-correlated.rules
usr/share/sagan-git/rules/ipop3d.rules
usr/share/sagan-git/rules/windows-mssql.rules
usr/share/sagan-git/rules/windows-geoip.rules
usr/share/sagan-git/rules/fatpipe-aetas.rules
usr/share/sagan-git/rules/ftpd.rules
usr/share/sagan-git/rules/classification.config
usr/share/sagan-git/rules/huawei.rules
usr/share/sagan-git/rules/linux-kernel-normalize.rulebase
usr/share/sagan-git/rules/bash.rules
usr/share/sagan-git/rules/citrix-blacklist.rules
usr/share/sagan-git/rules/citrix-bluedot.rules
usr/share/sagan-git/rules/protocol.map
usr/share/sagan-git/rules/sendmail.rules
usr/share/sagan-git/rules/hostapd.rules
usr/share/sagan-git/rules/kismet.rules
usr/share/sagan-git/rules/imapd-geoip.rules
usr/share/sagan-git/rules/riverbed-aetas.rules
usr/share/sagan-git/rules/citrix.rules
usr/share/sagan-git/rules/nginx.rules
usr/share/sagan-git/rules/su.rules
usr/share/sagan-git/rules/symantec-ems.rules
usr/share/sagan-git/rules/ssh-tectia-server-geoip.rules
usr/share/sagan-git/rules/bonding.rules
usr/share/sagan-git/rules/nexpose.rules
usr/share/sagan-git/rules/grsec.rules
usr/share/sagan-git/rules/pptp.rules
usr/share/sagan-git/rules/proftpd-geoip.rules
usr/share/sagan-git/rules/bro-ids.rules
usr/share/sagan-git/rules/cisco-wlc.rules
usr/share/sagan-git/rules/windows-misc.rules
usr/share/sagan-git/rules/snort.rules
usr/share/sagan-git/rules/reference.config
usr/share/sagan-git/rules/windows-brointel.rules
usr/share/sagan-git/rules/dovecot.rules
usr/share/sagan-git/rules/citrix-brointel.rules
usr/share/sagan-git/rules/windows.rules
usr/share/sagan-git/rules/windows-owa-correlated.rules
usr/share/sagan-git/rules/apc-emu.rules
usr/share/sagan-git/rules/openvpn.rules
usr/share/sagan-git/rules/knockd.rules
usr/share/sagan-git/rules/openssh.rules
usr/share/sagan-git/rules/vsftpd-geoip.rules
usr/share/sagan-git/rules/ssh-tectia-server-correlated.rules
usr/share/sagan-git/rules/courier-correlated.rules
usr/share/sagan-git/rules/windows-owa-geoip.rules
usr/share/sagan-git/rules/citrix-normalize.rulesbase
usr/share/sagan-git/rules/fortinet-correlated.rules
usr/share/sagan-git/rules/bind.rules
usr/share/sagan-git/rules/windows-blacklist.rules
usr/share/sagan-git/rules/nfcapd.rules
usr/share/sagan-git/rules/windows-aetas.rules
usr/share/sagan-git/rules/ossec-mi.rules
usr/share/sagan-git/rules/web-attack.rules
usr/share/sagan-git/rules/artillery.rules
usr/share/sagan-git/rules/vmpop3d.rules
usr/share/sagan-git/rules/fortinet-malware.rules
usr/share/sagan-git/rules/telnet.rules
usr/share/sagan-git/rules/windows-correlated.rules
usr/share/sagan-git/rules/cisco-acs.rules
usr/share/sagan-git/rules/vmware-normalize.rulebase
usr/share/sagan-git/rules/pure-ftpd.rules
usr/share/sagan-git/rules/cylance.rules
usr/share/sagan-git/rules/blacklist.rules
usr/share/sagan-git/rules/snort-normalize.rulebase
usr/share/sagan-git/rules/gen-msg.map
usr/share/sagan-git/rules/wordpress.rules
usr/share/sagan-git/rules/openssh-geoip.rules
usr/share/sagan-git/rules/php.rules
usr/share/sagan-git/rules/xinetd.rules
usr/share/sagan-git/rules/cisco-sdee.rules
usr/share/sagan-git/rules/openssh-normalize.rulebase
usr/share/sagan-git/rules/ntp.rules
usr/share/sagan-git/rules/zeus.rules
usr/share/sagan-git/rules/nfcapd-malware.rules
usr/share/sagan-git/rules/vsftpd.rules
usr/share/sagan-git/rules/mysql.rules
usr/share/sagan-git/rules/ossec.rules
usr/share/sagan-git/rules/milter.rules
usr/share/sagan-git/rules/racoon.rules
usr/share/sagan-git/rules/cisco-brointel.rules
usr/share/sagan-git/rules/windows-malware.rules
usr/share/sagan-git/rules/bro-intel.rules
usr/share/sagan-git/rules/proftpd.rules
usr/share/sagan-git/rules/windows-owa-bluedot.rules
usr/share/sagan-git/rules/fortinet-geoip.rules
usr/share/sagan-git/rules/nfcapd-normalize.rulebase
usr/share/sagan-git/rules/arp-normalize.rulebase
usr/share/sagan-git/rules/vmware.rules
usr/share/sagan-git/rules/windows-bluedot.rules
usr/share/sagan-git/rules/imapd-correlated.rules
usr/share/sagan-git/rules/cisco-aetas.rules
usr/share/sagan-git/rules/openssh-correlated.rules
usr/share/sagan-git/rules/procurve-normalize.rulebase
usr/share/sagan-git/rules/fortinet-normalize.rulebase
usr/share/sagan-git/rules/bluedot.rules
usr/share/sagan-git/rules/digitalpersona.rules
usr/share/sagan-git/rules/samba.rules
usr/share/sagan-git/rules/weblabrinth.rules
usr/share/sagan-git/rules/cisco-ios.rules
usr/share/sagan-git/rules/vsftpd-correlated.rules
usr/share/sagan-git/rules/tcp.rules
usr/share/sagan-git/rules/riverbed.rules
usr/share/sagan-git/rules/fatpipe.rules
usr/share/sagan-git/rules/proxy-malware.rules
usr/share/sagan-git/rules/linux-kernel.rules
usr/share/sagan-git/rules/windows-owa-brointel.rules
usr/share/sagan-git/rules/cisco-malware.rules
usr/share/sagan-git/rules/windows-applocker.rules
usr/share/sagan-git/rules/vpopmail.rules
usr/share/sagan-git/rules/fortinet-aetas.rules
usr/share/sagan-git/rules/cisco-normalize.rulebase
usr/share/sagan-git/rules/windows-emet.rules
usr/share/sagan-git/rules/vmware-correlated.rules
usr/share/sagan-git/rules/imperva-normalize.rulebase
usr/share/sagan-git/rules/arp.rules
usr/share/sagan-git/rules/juniper.rules
usr/share/sagan-git/rules/deleted.rules
usr/share/sagan-git/rules/ssh-tectia-server-aetas.rules
usr/share/sagan-git/rules/sonicwall.rules
usr/share/sagan-git/rules/courier-geoip.rules
usr/share/sagan-git/rules/snort-geoip.rules
usr/share/sagan-git/rules/bro-normalize.rulebase
usr/share/sagan-git/rules/cisco-geoip.rules
usr/share/sagan-git/rules/cisco-pixasa.rules
usr/share/sagan-git/rules/mongodb.rules
usr/share/sagan-git/rules/fatpipe-geoip.rules
usr/share/sagan-git/rules/procurve.rules
usr/share/sagan-git/rules/courier.rules
usr/share/sagan-git/rules/hordeimp.rules
usr/share/sagan-git/rules/fortinet.rules
usr/share/sagan-git/rules/ssh-tectia-server.rules
usr/share/sagan-git/rules/README
usr/share/sagan-git/rules/citrix-geoip.rules
usr/share/sagan-git/rules/vmware-geoip.rules
usr/share/sagan-git/rules/postfix.rules
usr/share/sagan-git/rules/smtp-normalize.rulebase
usr/share/sagan-git/rules/citrix-correlated.rules
usr/share/sagan-git/rules/su-normalize.rulebase
usr/share/sagan-git/rules/roundcube.rules
usr/share/sagan-git/rules/windows-auth.rules
usr/share/sagan-git/rules/dns-normalize.rulebase
usr/share/sagan-git/rules/adtran.rules
