Rules for Unix

Hi experts,

I am trying to create two unix rules, but I am not able to identify these in the events that are coming through. It might very well be possible that these events have not yet triggered on the unix servers. I need help to create the conditions for these rules, so that once the corres[ponding event is actually generated on the unix systems, these rules would trigger.

  

Unix - User home directory modifiedThis rule looks for modification done to unix user account's home directory
Unix - User account parameters modifiedThis rule looks for modification done to unix user account's security parameters

Many thanks.