yes yes 15m yes /var/ossec/etc/shared/sca_drupal.yaml /var/ossec/etc/shared/sca_systemfiles.yaml no ps-list ps -eo user,pid,cmd 60s no yes 5