/usr/local/maldetect/sigs/