audit-stop.rules
auditd.conf
plugins.d/
rules.d/