import { Construct } from 'constructs'; import * as cdktf from 'cdktf'; export interface DefaultPreventionPolicyMacConfig extends cdktf.TerraformMetaArguments { /** * Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#chopper_webshell DefaultPreventionPolicyMac#chopper_webshell} */ readonly chopperWebshell?: boolean | cdktf.IResolvable; /** * Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#cloud_adware_and_pup DefaultPreventionPolicyMac#cloud_adware_and_pup} */ readonly cloudAdwareAndPup?: DefaultPreventionPolicyMacCloudAdwareAndPup; /** * Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#cloud_anti_malware DefaultPreventionPolicyMac#cloud_anti_malware} */ readonly cloudAntiMalware?: DefaultPreventionPolicyMacCloudAntiMalware; /** * Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection". * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#custom_blocking DefaultPreventionPolicyMac#custom_blocking} */ readonly customBlocking?: boolean | cdktf.IResolvable; /** * Description of the prevention policy. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#description DefaultPreventionPolicyMac#description} */ readonly description?: string; /** * Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#detect_on_write DefaultPreventionPolicyMac#detect_on_write} */ readonly detectOnWrite?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. A process with behaviors indicative of the Empyre Backdoor was terminated. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#empyre_backdoor DefaultPreventionPolicyMac#empyre_backdoor} */ readonly empyreBackdoor?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. An attempt to dump a user’s hashed password was blocked. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#hash_collector DefaultPreventionPolicyMac#hash_collector} */ readonly hashCollector?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#intelligence_sourced_threats DefaultPreventionPolicyMac#intelligence_sourced_threats} */ readonly intelligenceSourcedThreats?: boolean | cdktf.IResolvable; /** * IOA Rule Group to attach to the prevention policy. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#ioa_rule_groups DefaultPreventionPolicyMac#ioa_rule_groups} */ readonly ioaRuleGroups: string[]; /** * Whether to enable the setting. An attempt to recover a plaintext password via the kcpassword file was blocked. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#kc_password_decoded DefaultPreventionPolicyMac#kc_password_decoded} */ readonly kcPasswordDecoded?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. See these messages in Console.app by searching for Process: Falcon Notifications. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#notify_end_users DefaultPreventionPolicyMac#notify_end_users} */ readonly notifyEndUsers?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#prevent_suspicious_processes DefaultPreventionPolicyMac#prevent_suspicious_processes} */ readonly preventSuspiciousProcesses?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#quarantine DefaultPreventionPolicyMac#quarantine} */ readonly quarantine?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#quarantine_on_write DefaultPreventionPolicyMac#quarantine_on_write} */ readonly quarantineOnWrite?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. Provides visibility into suspicious scripts, including shell and other scripting languages. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#script_based_execution_monitoring DefaultPreventionPolicyMac#script_based_execution_monitoring} */ readonly scriptBasedExecutionMonitoring?: boolean | cdktf.IResolvable; /** * For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent adware and potentially unwanted programs (PUP). * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#sensor_adware_and_pup DefaultPreventionPolicyMac#sensor_adware_and_pup} */ readonly sensorAdwareAndPup?: DefaultPreventionPolicyMacSensorAdwareAndPup; /** * For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#sensor_anti_malware DefaultPreventionPolicyMac#sensor_anti_malware} */ readonly sensorAntiMalware?: DefaultPreventionPolicyMacSensorAntiMalware; /** * Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#sensor_tampering_protection DefaultPreventionPolicyMac#sensor_tampering_protection} */ readonly sensorTamperingProtection?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#upload_unknown_detection_related_executables DefaultPreventionPolicyMac#upload_unknown_detection_related_executables} */ readonly uploadUnknownDetectionRelatedExecutables?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#upload_unknown_executables DefaultPreventionPolicyMac#upload_unknown_executables} */ readonly uploadUnknownExecutables?: boolean | cdktf.IResolvable; /** * Whether to enable the setting. The execution of an XPCOM shell was blocked. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#xpcom_shell DefaultPreventionPolicyMac#xpcom_shell} */ readonly xpcomShell?: boolean | cdktf.IResolvable; } export interface DefaultPreventionPolicyMacCloudAdwareAndPup { /** * Machine learning level for detection. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#detection DefaultPreventionPolicyMac#detection} */ readonly detection: string; /** * Machine learning level for prevention. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#prevention DefaultPreventionPolicyMac#prevention} */ readonly prevention: string; } export declare function defaultPreventionPolicyMacCloudAdwareAndPupToTerraform(struct?: DefaultPreventionPolicyMacCloudAdwareAndPup | cdktf.IResolvable): any; export declare function defaultPreventionPolicyMacCloudAdwareAndPupToHclTerraform(struct?: DefaultPreventionPolicyMacCloudAdwareAndPup | cdktf.IResolvable): any; export declare class DefaultPreventionPolicyMacCloudAdwareAndPupOutputReference extends cdktf.ComplexObject { private isEmptyObject; private resolvableValue?; /** * @param terraformResource The parent resource * @param terraformAttribute The attribute on the parent resource this class is referencing */ constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string); get internalValue(): DefaultPreventionPolicyMacCloudAdwareAndPup | cdktf.IResolvable | undefined; set internalValue(value: DefaultPreventionPolicyMacCloudAdwareAndPup | cdktf.IResolvable | undefined); private _detection?; get detection(): string; set detection(value: string); get detectionInput(): string; private _prevention?; get prevention(): string; set prevention(value: string); get preventionInput(): string; } export interface DefaultPreventionPolicyMacCloudAntiMalware { /** * Machine learning level for detection. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#detection DefaultPreventionPolicyMac#detection} */ readonly detection: string; /** * Machine learning level for prevention. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#prevention DefaultPreventionPolicyMac#prevention} */ readonly prevention: string; } export declare function defaultPreventionPolicyMacCloudAntiMalwareToTerraform(struct?: DefaultPreventionPolicyMacCloudAntiMalware | cdktf.IResolvable): any; export declare function defaultPreventionPolicyMacCloudAntiMalwareToHclTerraform(struct?: DefaultPreventionPolicyMacCloudAntiMalware | cdktf.IResolvable): any; export declare class DefaultPreventionPolicyMacCloudAntiMalwareOutputReference extends cdktf.ComplexObject { private isEmptyObject; private resolvableValue?; /** * @param terraformResource The parent resource * @param terraformAttribute The attribute on the parent resource this class is referencing */ constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string); get internalValue(): DefaultPreventionPolicyMacCloudAntiMalware | cdktf.IResolvable | undefined; set internalValue(value: DefaultPreventionPolicyMacCloudAntiMalware | cdktf.IResolvable | undefined); private _detection?; get detection(): string; set detection(value: string); get detectionInput(): string; private _prevention?; get prevention(): string; set prevention(value: string); get preventionInput(): string; } export interface DefaultPreventionPolicyMacSensorAdwareAndPup { /** * Machine learning level for detection. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#detection DefaultPreventionPolicyMac#detection} */ readonly detection: string; /** * Machine learning level for prevention. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#prevention DefaultPreventionPolicyMac#prevention} */ readonly prevention: string; } export declare function defaultPreventionPolicyMacSensorAdwareAndPupToTerraform(struct?: DefaultPreventionPolicyMacSensorAdwareAndPup | cdktf.IResolvable): any; export declare function defaultPreventionPolicyMacSensorAdwareAndPupToHclTerraform(struct?: DefaultPreventionPolicyMacSensorAdwareAndPup | cdktf.IResolvable): any; export declare class DefaultPreventionPolicyMacSensorAdwareAndPupOutputReference extends cdktf.ComplexObject { private isEmptyObject; private resolvableValue?; /** * @param terraformResource The parent resource * @param terraformAttribute The attribute on the parent resource this class is referencing */ constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string); get internalValue(): DefaultPreventionPolicyMacSensorAdwareAndPup | cdktf.IResolvable | undefined; set internalValue(value: DefaultPreventionPolicyMacSensorAdwareAndPup | cdktf.IResolvable | undefined); private _detection?; get detection(): string; set detection(value: string); get detectionInput(): string; private _prevention?; get prevention(): string; set prevention(value: string); get preventionInput(): string; } export interface DefaultPreventionPolicyMacSensorAntiMalware { /** * Machine learning level for detection. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#detection DefaultPreventionPolicyMac#detection} */ readonly detection: string; /** * Machine learning level for prevention. * * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#prevention DefaultPreventionPolicyMac#prevention} */ readonly prevention: string; } export declare function defaultPreventionPolicyMacSensorAntiMalwareToTerraform(struct?: DefaultPreventionPolicyMacSensorAntiMalware | cdktf.IResolvable): any; export declare function defaultPreventionPolicyMacSensorAntiMalwareToHclTerraform(struct?: DefaultPreventionPolicyMacSensorAntiMalware | cdktf.IResolvable): any; export declare class DefaultPreventionPolicyMacSensorAntiMalwareOutputReference extends cdktf.ComplexObject { private isEmptyObject; private resolvableValue?; /** * @param terraformResource The parent resource * @param terraformAttribute The attribute on the parent resource this class is referencing */ constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string); get internalValue(): DefaultPreventionPolicyMacSensorAntiMalware | cdktf.IResolvable | undefined; set internalValue(value: DefaultPreventionPolicyMacSensorAntiMalware | cdktf.IResolvable | undefined); private _detection?; get detection(): string; set detection(value: string); get detectionInput(): string; private _prevention?; get prevention(): string; set prevention(value: string); get preventionInput(): string; } /** * Represents a {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac crowdstrike_default_prevention_policy_mac} */ export declare class DefaultPreventionPolicyMac extends cdktf.TerraformResource { static readonly tfResourceType = "crowdstrike_default_prevention_policy_mac"; /** * Generates CDKTF code for importing a DefaultPreventionPolicyMac resource upon running "cdktf plan " * @param scope The scope in which to define this construct * @param importToId The construct id used in the generated config for the DefaultPreventionPolicyMac to import * @param importFromId The id of the existing DefaultPreventionPolicyMac that should be imported. Refer to the {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac#import import section} in the documentation of this resource for the id to use * @param provider? Optional instance of the provider where the DefaultPreventionPolicyMac to import is found */ static generateConfigForImport(scope: Construct, importToId: string, importFromId: string, provider?: cdktf.TerraformProvider): any; /** * Create a new {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_mac crowdstrike_default_prevention_policy_mac} Resource * * @param scope The scope in which to define this construct * @param id The scoped construct ID. Must be unique amongst siblings in the same scope * @param options DefaultPreventionPolicyMacConfig */ constructor(scope: Construct, id: string, config: DefaultPreventionPolicyMacConfig); private _chopperWebshell?; get chopperWebshell(): boolean | cdktf.IResolvable; set chopperWebshell(value: boolean | cdktf.IResolvable); resetChopperWebshell(): void; get chopperWebshellInput(): any; private _cloudAdwareAndPup; get cloudAdwareAndPup(): DefaultPreventionPolicyMacCloudAdwareAndPupOutputReference; putCloudAdwareAndPup(value: DefaultPreventionPolicyMacCloudAdwareAndPup): void; resetCloudAdwareAndPup(): void; get cloudAdwareAndPupInput(): any; private _cloudAntiMalware; get cloudAntiMalware(): DefaultPreventionPolicyMacCloudAntiMalwareOutputReference; putCloudAntiMalware(value: DefaultPreventionPolicyMacCloudAntiMalware): void; resetCloudAntiMalware(): void; get cloudAntiMalwareInput(): any; private _customBlocking?; get customBlocking(): boolean | cdktf.IResolvable; set customBlocking(value: boolean | cdktf.IResolvable); resetCustomBlocking(): void; get customBlockingInput(): any; private _description?; get description(): string; set description(value: string); resetDescription(): void; get descriptionInput(): string; private _detectOnWrite?; get detectOnWrite(): boolean | cdktf.IResolvable; set detectOnWrite(value: boolean | cdktf.IResolvable); resetDetectOnWrite(): void; get detectOnWriteInput(): any; private _empyreBackdoor?; get empyreBackdoor(): boolean | cdktf.IResolvable; set empyreBackdoor(value: boolean | cdktf.IResolvable); resetEmpyreBackdoor(): void; get empyreBackdoorInput(): any; private _hashCollector?; get hashCollector(): boolean | cdktf.IResolvable; set hashCollector(value: boolean | cdktf.IResolvable); resetHashCollector(): void; get hashCollectorInput(): any; get id(): any; private _intelligenceSourcedThreats?; get intelligenceSourcedThreats(): boolean | cdktf.IResolvable; set intelligenceSourcedThreats(value: boolean | cdktf.IResolvable); resetIntelligenceSourcedThreats(): void; get intelligenceSourcedThreatsInput(): any; private _ioaRuleGroups?; get ioaRuleGroups(): string[]; set ioaRuleGroups(value: string[]); get ioaRuleGroupsInput(): string[]; private _kcPasswordDecoded?; get kcPasswordDecoded(): boolean | cdktf.IResolvable; set kcPasswordDecoded(value: boolean | cdktf.IResolvable); resetKcPasswordDecoded(): void; get kcPasswordDecodedInput(): any; get lastUpdated(): any; private _notifyEndUsers?; get notifyEndUsers(): boolean | cdktf.IResolvable; set notifyEndUsers(value: boolean | cdktf.IResolvable); resetNotifyEndUsers(): void; get notifyEndUsersInput(): any; private _preventSuspiciousProcesses?; get preventSuspiciousProcesses(): boolean | cdktf.IResolvable; set preventSuspiciousProcesses(value: boolean | cdktf.IResolvable); resetPreventSuspiciousProcesses(): void; get preventSuspiciousProcessesInput(): any; private _quarantine?; get quarantine(): boolean | cdktf.IResolvable; set quarantine(value: boolean | cdktf.IResolvable); resetQuarantine(): void; get quarantineInput(): any; private _quarantineOnWrite?; get quarantineOnWrite(): boolean | cdktf.IResolvable; set quarantineOnWrite(value: boolean | cdktf.IResolvable); resetQuarantineOnWrite(): void; get quarantineOnWriteInput(): any; private _scriptBasedExecutionMonitoring?; get scriptBasedExecutionMonitoring(): boolean | cdktf.IResolvable; set scriptBasedExecutionMonitoring(value: boolean | cdktf.IResolvable); resetScriptBasedExecutionMonitoring(): void; get scriptBasedExecutionMonitoringInput(): any; private _sensorAdwareAndPup; get sensorAdwareAndPup(): DefaultPreventionPolicyMacSensorAdwareAndPupOutputReference; putSensorAdwareAndPup(value: DefaultPreventionPolicyMacSensorAdwareAndPup): void; resetSensorAdwareAndPup(): void; get sensorAdwareAndPupInput(): any; private _sensorAntiMalware; get sensorAntiMalware(): DefaultPreventionPolicyMacSensorAntiMalwareOutputReference; putSensorAntiMalware(value: DefaultPreventionPolicyMacSensorAntiMalware): void; resetSensorAntiMalware(): void; get sensorAntiMalwareInput(): any; private _sensorTamperingProtection?; get sensorTamperingProtection(): boolean | cdktf.IResolvable; set sensorTamperingProtection(value: boolean | cdktf.IResolvable); resetSensorTamperingProtection(): void; get sensorTamperingProtectionInput(): any; private _uploadUnknownDetectionRelatedExecutables?; get uploadUnknownDetectionRelatedExecutables(): boolean | cdktf.IResolvable; set uploadUnknownDetectionRelatedExecutables(value: boolean | cdktf.IResolvable); resetUploadUnknownDetectionRelatedExecutables(): void; get uploadUnknownDetectionRelatedExecutablesInput(): any; private _uploadUnknownExecutables?; get uploadUnknownExecutables(): boolean | cdktf.IResolvable; set uploadUnknownExecutables(value: boolean | cdktf.IResolvable); resetUploadUnknownExecutables(): void; get uploadUnknownExecutablesInput(): any; private _xpcomShell?; get xpcomShell(): boolean | cdktf.IResolvable; set xpcomShell(value: boolean | cdktf.IResolvable); resetXpcomShell(): void; get xpcomShellInput(): any; protected synthesizeAttributes(): { [name: string]: any; }; protected synthesizeHclAttributes(): { [name: string]: any; }; }