[ossec-list] missed file changes

[Patrick]

How would I go about troubleshooting if I suspect that some files were
changed and Ossec didn't alert on the change?
I'm currently using Ossec 2.0.

The files were in the /bin on a Linux server.

Thanks,
Patrick