type:SYSCALL (exe:\/tmp\/* OR exe:\/var\/www\/* OR exe:\/home\/*\/public_html\/* OR exe:\/usr\/local\/apache2\/* OR exe:\/usr\/local\/httpd\/* OR exe:\/var\/apache\/* OR exe:\/srv\/www\/* OR exe:\/home\/httpd\/html\/* OR exe:\/srv\/http\/* OR exe:\/usr\/share\/nginx\/html\/* OR exe:\/var\/lib\/pgsql\/data\/* OR exe:\/usr\/local\/mysql\/data\/* OR exe:\/var\/lib\/mysql\/* OR exe:\/var\/vsftpd\/* OR exe:\/etc\/bind\/* OR exe:\/var\/named\/*)