osquery-ms-beelink-ser5pro-01

{
  "surveilr-cli": {
    "ingest": {
      "files": {
        "classifier": {
          "flaggables": [
            {
              "regex": "/(\\.git|node_modules)/",
              "flags": "IGNORE_RESOURCE",
              "nature": null
            },
            {
              "regex": "\\.(?P<nature>md|mdx|html|json|jsonc|puml|txt|toml|yml|xml|tap|csv|tsv|ssv|psv|tm7|pdf|docx|doc|pptx|ppt|xlsx|xls|jpg|jpeg|png)$",
              "flags": "CONTENT_ACQUIRABLE",
              "nature": "?P<nature>"
            },
            {
              "regex": "surveilr\\[(?P<nature>[^\\]]*)\\]",
              "flags": "CAPTURABLE_EXECUTABLE",
              "nature": "?P<nature>"
            },
            {
              "regex": "surveilr-SQL",
              "flags": "CAPTURABLE_EXECUTABLE | CAPTURABLE_SQL",
              "nature": null
            }
          ],
          "rewrite_path_regexs": [
            {
              "regex": "(\\.plantuml)$",
              "replace": ".puml"
            },
            {
              "regex": "(\\.text)$",
              "replace": ".txt"
            },
            {
              "regex": "(\\.yaml)$",
              "replace": ".yml"
            }
          ],
          "smart_ignore_conf_files": [
            ".surveilr_ignore"
          ]
        },
        "root_fs_paths": []
      },
      "imap": null,
      "plm": null
    },
    "shell": null,
    "osquery_ms": {
      "code_notebook_name": "osQuery Management Server (Prime)",
      "policy_notebook_name": "osQuery Management Server (Policy)",
      "result_filters_notebook_name": "osQuery Management Server Default Filters (Prime)",
      "query": null
    }
  }
}