%FILES%
usr/
usr/share/
usr/share/sagan-git/
usr/share/sagan-git/rules/
usr/share/sagan-git/rules/ChangeLog
usr/share/sagan-git/rules/LICENSE
usr/share/sagan-git/rules/README.md
usr/share/sagan-git/rules/adtran.rules
usr/share/sagan-git/rules/apache.rules
usr/share/sagan-git/rules/apc-emu.rules
usr/share/sagan-git/rules/arp.rules
usr/share/sagan-git/rules/artillery.rules
usr/share/sagan-git/rules/as400.rules
usr/share/sagan-git/rules/asterisk.rules
usr/share/sagan-git/rules/attack.rules
usr/share/sagan-git/rules/auditd.rules
usr/share/sagan-git/rules/azure-eventhub-ad-geoip.rules
usr/share/sagan-git/rules/azure-eventhub-ad.rules
usr/share/sagan-git/rules/barracuda.rules
usr/share/sagan-git/rules/bash.rules
usr/share/sagan-git/rules/bind.rules
usr/share/sagan-git/rules/blacklist.rules
usr/share/sagan-git/rules/bluedot-categories.conf
usr/share/sagan-git/rules/bluedot.rules
usr/share/sagan-git/rules/bonding.rules
usr/share/sagan-git/rules/bro-bluedot.rules
usr/share/sagan-git/rules/bro-ids.rules
usr/share/sagan-git/rules/bro-intel.rules
usr/share/sagan-git/rules/cacti-thold.rules
usr/share/sagan-git/rules/carbonblack.rules
usr/share/sagan-git/rules/centrify.rules
usr/share/sagan-git/rules/cisco-aetas.rules
usr/share/sagan-git/rules/cisco-amp.rules
usr/share/sagan-git/rules/cisco-blacklist.rules
usr/share/sagan-git/rules/cisco-bluedot.rules
usr/share/sagan-git/rules/cisco-brointel.rules
usr/share/sagan-git/rules/cisco-correlated.rules
usr/share/sagan-git/rules/cisco-cucm.rules
usr/share/sagan-git/rules/cisco-geoip.rules
usr/share/sagan-git/rules/cisco-ios.rules
usr/share/sagan-git/rules/cisco-ise-blacklist.rules
usr/share/sagan-git/rules/cisco-ise-bluedot.rules
usr/share/sagan-git/rules/cisco-ise-brointel.rules
usr/share/sagan-git/rules/cisco-ise-geoip.rules
usr/share/sagan-git/rules/cisco-ise.rules
usr/share/sagan-git/rules/cisco-malware.rules
usr/share/sagan-git/rules/cisco-meraki.rules
usr/share/sagan-git/rules/cisco-pixasa.rules
usr/share/sagan-git/rules/cisco-prime.rules
usr/share/sagan-git/rules/cisco-sdee.rules
usr/share/sagan-git/rules/cisco-wlc.rules
usr/share/sagan-git/rules/citrix-blacklist.rules
usr/share/sagan-git/rules/citrix-bluedot.rules
usr/share/sagan-git/rules/citrix-brointel.rules
usr/share/sagan-git/rules/citrix-correlated.rules
usr/share/sagan-git/rules/citrix-geoip.rules
usr/share/sagan-git/rules/citrix.rules
usr/share/sagan-git/rules/classification.config
usr/share/sagan-git/rules/cloudtrail.rules
usr/share/sagan-git/rules/courier-bluedot.rules
usr/share/sagan-git/rules/courier-correlated.rules
usr/share/sagan-git/rules/courier-geoip.rules
usr/share/sagan-git/rules/courier.rules
usr/share/sagan-git/rules/crowdstrike.rules
usr/share/sagan-git/rules/cylance.rules
usr/share/sagan-git/rules/deleted.rules
usr/share/sagan-git/rules/digitalpersona.rules
usr/share/sagan-git/rules/dovecot.rules
usr/share/sagan-git/rules/dynamic.rules
usr/share/sagan-git/rules/f5-big-ip-bluedot.rules
usr/share/sagan-git/rules/f5-big-ip-geoip.rules
usr/share/sagan-git/rules/f5-big-ip.rules
usr/share/sagan-git/rules/fatpipe-aetas.rules
usr/share/sagan-git/rules/fatpipe-bluedot.rules
usr/share/sagan-git/rules/fatpipe-correlated.rules
usr/share/sagan-git/rules/fatpipe-geoip.rules
usr/share/sagan-git/rules/fatpipe.rules
usr/share/sagan-git/rules/fingerprint.rules
usr/share/sagan-git/rules/fipaypin.rules
usr/share/sagan-git/rules/fortinet-aetas.rules
usr/share/sagan-git/rules/fortinet-bluedot.rules
usr/share/sagan-git/rules/fortinet-correlated.rules
usr/share/sagan-git/rules/fortinet-geoip.rules
usr/share/sagan-git/rules/fortinet-malware.rules
usr/share/sagan-git/rules/fortinet.rules
usr/share/sagan-git/rules/ftpd.rules
usr/share/sagan-git/rules/gcp-scc.rules
usr/share/sagan-git/rules/gen-msg.map
usr/share/sagan-git/rules/grsec.rules
usr/share/sagan-git/rules/honeyd.rules
usr/share/sagan-git/rules/hordeimp.rules
usr/share/sagan-git/rules/hostapd.rules
usr/share/sagan-git/rules/huawei.rules
usr/share/sagan-git/rules/imapd-bluedot.rules
usr/share/sagan-git/rules/imapd-correlated.rules
usr/share/sagan-git/rules/imapd-geoip.rules
usr/share/sagan-git/rules/imapd.rules
usr/share/sagan-git/rules/incapsula.rules
usr/share/sagan-git/rules/ipop3d.rules
usr/share/sagan-git/rules/json-input.map
usr/share/sagan-git/rules/json-message.map
usr/share/sagan-git/rules/juniper-aetas.rules
usr/share/sagan-git/rules/juniper-bluedot.rules
usr/share/sagan-git/rules/juniper-geoip.rules
usr/share/sagan-git/rules/juniper.rules
usr/share/sagan-git/rules/kismet.rules
usr/share/sagan-git/rules/knockd.rules
usr/share/sagan-git/rules/linux-kernel.rules
usr/share/sagan-git/rules/mcafee-web-gateway.rules
usr/share/sagan-git/rules/milter.rules
usr/share/sagan-git/rules/mongodb.rules
usr/share/sagan-git/rules/ms-defender.rules
usr/share/sagan-git/rules/msapi-airinvestigation.rules
usr/share/sagan-git/rules/msapi-azuread-bluedot.rules
usr/share/sagan-git/rules/msapi-azuread-geoip.rules
usr/share/sagan-git/rules/msapi-azuread.rules
usr/share/sagan-git/rules/msapi-exchange-bluedot.rules
usr/share/sagan-git/rules/msapi-exchange-geoip.rules
usr/share/sagan-git/rules/msapi-exchange.rules
usr/share/sagan-git/rules/msapi-microsoftflow-bluedot.rules
usr/share/sagan-git/rules/msapi-microsoftflow-geoip.rules
usr/share/sagan-git/rules/msapi-microsoftforms-bluedot.rules
usr/share/sagan-git/rules/msapi-microsoftforms-geoip.rules
usr/share/sagan-git/rules/msapi-microsoftstream-bluedot.rules
usr/share/sagan-git/rules/msapi-microsoftstream-geoip.rules
usr/share/sagan-git/rules/msapi-microsoftteams-bluedot.rules
usr/share/sagan-git/rules/msapi-microsoftteams-geoip.rules
usr/share/sagan-git/rules/msapi-onedrive-bluedot.rules
usr/share/sagan-git/rules/msapi-onedrive-geoip.rules
usr/share/sagan-git/rules/msapi-onedrive.rules
usr/share/sagan-git/rules/msapi-powerbi-bluedot.rules
usr/share/sagan-git/rules/msapi-powerbi-geoip.rules
usr/share/sagan-git/rules/msapi-securitycompliancecenter.rules
usr/share/sagan-git/rules/msapi-sharepoint-bluedot.rules
usr/share/sagan-git/rules/msapi-sharepoint-geoip.rules
usr/share/sagan-git/rules/msapi-sharepoint.rules
usr/share/sagan-git/rules/msapi-threatintelligence.rules
usr/share/sagan-git/rules/mysql.rules
usr/share/sagan-git/rules/nexpose.rules
usr/share/sagan-git/rules/nfcapd-malware.rules
usr/share/sagan-git/rules/nfcapd.rules
usr/share/sagan-git/rules/nginx.rules
usr/share/sagan-git/rules/normalization.rulebase
usr/share/sagan-git/rules/ntp.rules
usr/share/sagan-git/rules/nxlog.rules
usr/share/sagan-git/rules/office365.rules
usr/share/sagan-git/rules/onelogin.rules
usr/share/sagan-git/rules/openssh-aetas.rules
usr/share/sagan-git/rules/openssh-bluedot.rules
usr/share/sagan-git/rules/openssh-correlated.rules
usr/share/sagan-git/rules/openssh-geoip.rules
usr/share/sagan-git/rules/openssh.rules
usr/share/sagan-git/rules/openvpn.rules
usr/share/sagan-git/rules/oracle.rules
usr/share/sagan-git/rules/ossec-mi.rules
usr/share/sagan-git/rules/ossec.rules
usr/share/sagan-git/rules/palo-alto-geoip.rules
usr/share/sagan-git/rules/palo-alto.rules
usr/share/sagan-git/rules/passwordstate.rules
usr/share/sagan-git/rules/php.rules
usr/share/sagan-git/rules/postfix.rules
usr/share/sagan-git/rules/postgresql.rules
usr/share/sagan-git/rules/pptp.rules
usr/share/sagan-git/rules/procurve.rules
usr/share/sagan-git/rules/proftpd-aetas.rules
usr/share/sagan-git/rules/proftpd-bluedot.rules
usr/share/sagan-git/rules/proftpd-geoip.rules
usr/share/sagan-git/rules/proftpd.rules
usr/share/sagan-git/rules/proofpoint.rules
usr/share/sagan-git/rules/protocol.map
usr/share/sagan-git/rules/proxy-malware.rules
usr/share/sagan-git/rules/pure-ftpd.rules
usr/share/sagan-git/rules/racoon.rules
usr/share/sagan-git/rules/reference.config
usr/share/sagan-git/rules/riverbed-aetas.rules
usr/share/sagan-git/rules/riverbed-bluedot.rules
usr/share/sagan-git/rules/riverbed-geoip.rules
usr/share/sagan-git/rules/riverbed.rules
usr/share/sagan-git/rules/roundcube.rules
usr/share/sagan-git/rules/rsa-dpm.rules
usr/share/sagan-git/rules/rsync.rules
usr/share/sagan-git/rules/sagan-sid-msg.map
usr/share/sagan-git/rules/samba.rules
usr/share/sagan-git/rules/sendmail.rules
usr/share/sagan-git/rules/snort-bluedot.rules
usr/share/sagan-git/rules/snort-geoip.rules
usr/share/sagan-git/rules/snort.rules
usr/share/sagan-git/rules/solaris.rules
usr/share/sagan-git/rules/sonicwall.rules
usr/share/sagan-git/rules/squid.rules
usr/share/sagan-git/rules/ssh-tectia-server-aetas.rules
usr/share/sagan-git/rules/ssh-tectia-server-bluedot.rules
usr/share/sagan-git/rules/ssh-tectia-server-correlated.rules
usr/share/sagan-git/rules/ssh-tectia-server-geoip.rules
usr/share/sagan-git/rules/ssh-tectia-server.rules
usr/share/sagan-git/rules/su.rules
usr/share/sagan-git/rules/symantec-ems.rules
usr/share/sagan-git/rules/syslog.rules
usr/share/sagan-git/rules/tcp.rules
usr/share/sagan-git/rules/telnet.rules
usr/share/sagan-git/rules/trendmicro.rules
usr/share/sagan-git/rules/tripwire.rules
usr/share/sagan-git/rules/vmpop3d.rules
usr/share/sagan-git/rules/vmware-bluedot.rules
usr/share/sagan-git/rules/vmware-correlated.rules
usr/share/sagan-git/rules/vmware-geoip.rules
usr/share/sagan-git/rules/vmware.rules
usr/share/sagan-git/rules/vpopmail.rules
usr/share/sagan-git/rules/vsftpd-bluedot.rules
usr/share/sagan-git/rules/vsftpd-correlated.rules
usr/share/sagan-git/rules/vsftpd-geoip.rules
usr/share/sagan-git/rules/vsftpd.rules
usr/share/sagan-git/rules/watchguard-geoip.rules
usr/share/sagan-git/rules/watchguard.rules
usr/share/sagan-git/rules/web-attack.rules
usr/share/sagan-git/rules/weblabrinth.rules
usr/share/sagan-git/rules/windows-aetas.rules
usr/share/sagan-git/rules/windows-applocker.rules
usr/share/sagan-git/rules/windows-auth.rules
usr/share/sagan-git/rules/windows-blacklist.rules
usr/share/sagan-git/rules/windows-bluedot.rules
usr/share/sagan-git/rules/windows-brointel.rules
usr/share/sagan-git/rules/windows-correlated.rules
usr/share/sagan-git/rules/windows-emet.rules
usr/share/sagan-git/rules/windows-geoip.rules
usr/share/sagan-git/rules/windows-malware.rules
usr/share/sagan-git/rules/windows-misc.rules
usr/share/sagan-git/rules/windows-mssql.rules
usr/share/sagan-git/rules/windows-owa-blacklist.rules
usr/share/sagan-git/rules/windows-owa-bluedot.rules
usr/share/sagan-git/rules/windows-owa-brointel.rules
usr/share/sagan-git/rules/windows-owa-correlated.rules
usr/share/sagan-git/rules/windows-owa-geoip.rules
usr/share/sagan-git/rules/windows-owa.rules
usr/share/sagan-git/rules/windows-security.rules
usr/share/sagan-git/rules/windows-sysmon.rules
usr/share/sagan-git/rules/windows.rules
usr/share/sagan-git/rules/wordpress.rules
usr/share/sagan-git/rules/xinetd.rules
usr/share/sagan-git/rules/yubikey.rules
usr/share/sagan-git/rules/zeus.rules
usr/share/sagan-git/rules/zimbra-geoip.rules
usr/share/sagan-git/rules/zimbra.rules
usr/share/sagan-git/rules/zingbox.rules
usr/share/sagan-git/rules/zscaler-bluedot.rules
usr/share/sagan-git/rules/zscaler.rules
