/etc/ is in prelude-correlator 4.1.1-2.
This file is owned by root:root, with mode 0o755.
..
/etc/prelude-correlator/
/etc/prelude-correlator/conf.d/
/etc/prelude-correlator/conf.d/README
/etc/prelude-correlator/prelude-correlator.conf
/etc/prelude-correlator/rules/
/etc/prelude-correlator/rules/python/
/etc/prelude-correlator/rules/python/BruteForcePlugin.py
/etc/prelude-correlator/rules/python/BusinessHourPlugin.py
/etc/prelude-correlator/rules/python/CIArmyPlugin.py
/etc/prelude-correlator/rules/python/DshieldPlugin.py
/etc/prelude-correlator/rules/python/EventScanPlugin.py
/etc/prelude-correlator/rules/python/EventStormPlugin.py
/etc/prelude-correlator/rules/python/EventSweepPlugin.py
/etc/prelude-correlator/rules/python/FirewallPlugin.py
/etc/prelude-correlator/rules/python/OpenSSHAuthPlugin.py
/etc/prelude-correlator/rules/python/SpamhausDropPlugin.py
/etc/prelude-correlator/rules/python/WormPlugin.py
/etc/prelude-correlator/rules/python/__init__.py