43200 /usr/local/bin,/usr/local/sbin /etc/nginx /etc/ssh /etc/cron.d /etc/sudoers.d /etc/ssl/private.key /etc/mtab /etc/nginx/nginx.pid .log$|.swp$|.tmp$ audit 50 10 yes 5m 10 43200 C:\inetpub\wwwroot 300 C:\Users\*\Downloads HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\SYSTEM\Setup HKEY_LOCAL_MACHINE\Security\Policy\Secrets \Enum$ 50