import { Construct } from 'constructs';
import * as cdktf from 'cdktf';
export interface DefaultPreventionPolicyWindowsConfig extends cdktf.TerraformMetaArguments {
    /**
    * Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#additional_user_mode_data DefaultPreventionPolicyWindows#additional_user_mode_data}
    */
    readonly additionalUserModeData?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#advanced_remediation DefaultPreventionPolicyWindows#advanced_remediation}
    */
    readonly advancedRemediation?: boolean | cdktf.IResolvable;
    /**
    * Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#adware_and_pup DefaultPreventionPolicyWindows#adware_and_pup}
    */
    readonly adwareAndPup?: DefaultPreventionPolicyWindowsAdwareAndPup;
    /**
    * Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#application_exploitation_activity DefaultPreventionPolicyWindows#application_exploitation_activity}
    */
    readonly applicationExploitationActivity?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Deletion of backups often indicative of ransomware activity.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#backup_deletion DefaultPreventionPolicyWindows#backup_deletion}
    */
    readonly backupDeletion?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#bios_deep_visibility DefaultPreventionPolicyWindows#bios_deep_visibility}
    */
    readonly biosDeepVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block BCD registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as security config changes. The associated process may be killed. Requires suspicious_registry_operations to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#boot_configuration_database_protection DefaultPreventionPolicyWindows#boot_configuration_database_protection}
    */
    readonly bootConfigurationDatabaseProtection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#chopper_webshell DefaultPreventionPolicyWindows#chopper_webshell}
    */
    readonly chopperWebshell?: boolean | cdktf.IResolvable;
    /**
    * For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known PUP and Adware.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#cloud_adware_pup_user_initiated DefaultPreventionPolicyWindows#cloud_adware_pup_user_initiated}
    */
    readonly cloudAdwarePupUserInitiated?: DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiated;
    /**
    * Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#cloud_anti_malware DefaultPreventionPolicyWindows#cloud_anti_malware}
    */
    readonly cloudAntiMalware?: DefaultPreventionPolicyWindowsCloudAntiMalware;
    /**
    * Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#cloud_anti_malware_microsoft_office_files DefaultPreventionPolicyWindows#cloud_anti_malware_microsoft_office_files}
    */
    readonly cloudAntiMalwareMicrosoftOfficeFiles?: DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles;
    /**
    * For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#cloud_anti_malware_user_initiated DefaultPreventionPolicyWindows#cloud_anti_malware_user_initiated}
    */
    readonly cloudAntiMalwareUserInitiated?: DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated;
    /**
    * Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#code_injection DefaultPreventionPolicyWindows#code_injection}
    */
    readonly codeInjection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#credential_dumping DefaultPreventionPolicyWindows#credential_dumping}
    */
    readonly credentialDumping?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A process associated with Cryptowall was blocked.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#cryptowall DefaultPreventionPolicyWindows#cryptowall}
    */
    readonly cryptowall?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#custom_blocking DefaultPreventionPolicyWindows#custom_blocking}
    */
    readonly customBlocking?: boolean | cdktf.IResolvable;
    /**
    * Description of the prevention policy.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#description DefaultPreventionPolicyWindows#description}
    */
    readonly description?: string;
    /**
    * Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detect_on_write DefaultPreventionPolicyWindows#detect_on_write}
    */
    readonly detectOnWrite?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#drive_by_download DefaultPreventionPolicyWindows#drive_by_download}
    */
    readonly driveByDownload?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#driver_load_prevention DefaultPreventionPolicyWindows#driver_load_prevention}
    */
    readonly driverLoadPrevention?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreter_only to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#engine_full_visibility DefaultPreventionPolicyWindows#engine_full_visibility}
    */
    readonly engineFullVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#enhanced_dll_load_visibility DefaultPreventionPolicyWindows#enhanced_dll_load_visibility}
    */
    readonly enhancedDllLoadVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#enhanced_exploitation_visibility DefaultPreventionPolicyWindows#enhanced_exploitation_visibility}
    */
    readonly enhancedExploitationVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#enhanced_ml_for_larger_files DefaultPreventionPolicyWindows#enhanced_ml_for_larger_files}
    */
    readonly enhancedMlForLargerFiles?: boolean | cdktf.IResolvable;
    /**
    * Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#extended_user_mode_data DefaultPreventionPolicyWindows#extended_user_mode_data}
    */
    readonly extendedUserModeData?: DefaultPreventionPolicyWindowsExtendedUserModeData;
    /**
    * Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#file_encryption DefaultPreventionPolicyWindows#file_encryption}
    */
    readonly fileEncryption?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#file_system_access DefaultPreventionPolicyWindows#file_system_access}
    */
    readonly fileSystemAccess?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity.  When disabled each user under active containment will be released and the File System Containment will enter a disabled mode
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#file_system_containment DefaultPreventionPolicyWindows#file_system_containment}
    */
    readonly fileSystemContainment?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#force_aslr DefaultPreventionPolicyWindows#force_aslr}
    */
    readonly forceAslr?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#force_dep DefaultPreventionPolicyWindows#force_dep}
    */
    readonly forceDep?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#hardware_enhanced_exploit_detection DefaultPreventionPolicyWindows#hardware_enhanced_exploit_detection}
    */
    readonly hardwareEnhancedExploitDetection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#heap_spray_preallocation DefaultPreventionPolicyWindows#heap_spray_preallocation}
    */
    readonly heapSprayPreallocation?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#http_detections DefaultPreventionPolicyWindows#http_detections}
    */
    readonly httpDetections?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#intelligence_sourced_threats DefaultPreventionPolicyWindows#intelligence_sourced_threats}
    */
    readonly intelligenceSourcedThreats?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#interpreter_only DefaultPreventionPolicyWindows#interpreter_only}
    */
    readonly interpreterOnly?: boolean | cdktf.IResolvable;
    /**
    * IOA Rule Group to attach to the prevention policy.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#ioa_rule_groups DefaultPreventionPolicyWindows#ioa_rule_groups}
    */
    readonly ioaRuleGroups: string[];
    /**
    * Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#javascript_via_rundll32 DefaultPreventionPolicyWindows#javascript_via_rundll32}
    */
    readonly javascriptViaRundll32?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A process determined to be associated with Locky was blocked.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#locky DefaultPreventionPolicyWindows#locky}
    */
    readonly locky?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#memory_scanning DefaultPreventionPolicyWindows#memory_scanning}
    */
    readonly memoryScanning?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#memory_scanning_scan_with_cpu DefaultPreventionPolicyWindows#memory_scanning_scan_with_cpu}
    */
    readonly memoryScanningScanWithCpu?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#microsoft_office_file_suspicious_macro_removal DefaultPreventionPolicyWindows#microsoft_office_file_suspicious_macro_removal}
    */
    readonly microsoftOfficeFileSuspiciousMacroRemoval?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#notify_end_users DefaultPreventionPolicyWindows#notify_end_users}
    */
    readonly notifyEndUsers?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#null_page_allocation DefaultPreventionPolicyWindows#null_page_allocation}
    */
    readonly nullPageAllocation?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#on_write_script_file_visibility DefaultPreventionPolicyWindows#on_write_script_file_visibility}
    */
    readonly onWriteScriptFileVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#prevent_suspicious_processes DefaultPreventionPolicyWindows#prevent_suspicious_processes}
    */
    readonly preventSuspiciousProcesses?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#quarantine_and_security_center_registration DefaultPreventionPolicyWindows#quarantine_and_security_center_registration}
    */
    readonly quarantineAndSecurityCenterRegistration?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#quarantine_on_removable_media DefaultPreventionPolicyWindows#quarantine_on_removable_media}
    */
    readonly quarantineOnRemovableMedia?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#quarantine_on_write DefaultPreventionPolicyWindows#quarantine_on_write}
    */
    readonly quarantineOnWrite?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#redact_http_detection_details DefaultPreventionPolicyWindows#redact_http_detection_details}
    */
    readonly redactHttpDetectionDetails?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#script_based_execution_monitoring DefaultPreventionPolicyWindows#script_based_execution_monitoring}
    */
    readonly scriptBasedExecutionMonitoring?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#seh_overwrite_protection DefaultPreventionPolicyWindows#seh_overwrite_protection}
    */
    readonly sehOverwriteProtection?: boolean | cdktf.IResolvable;
    /**
    * For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#sensor_anti_malware DefaultPreventionPolicyWindows#sensor_anti_malware}
    */
    readonly sensorAntiMalware?: DefaultPreventionPolicyWindowsSensorAntiMalware;
    /**
    * For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#sensor_anti_malware_user_initiated DefaultPreventionPolicyWindows#sensor_anti_malware_user_initiated}
    */
    readonly sensorAntiMalwareUserInitiated?: DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated;
    /**
    * Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#sensor_tampering_protection DefaultPreventionPolicyWindows#sensor_tampering_protection}
    */
    readonly sensorTamperingProtection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Upload suspicious files for advanced threat analysis with QuickScan Pro.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#suspicious_file_analysis DefaultPreventionPolicyWindows#suspicious_file_analysis}
    */
    readonly suspiciousFileAnalysis?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#suspicious_registry_operations DefaultPreventionPolicyWindows#suspicious_registry_operations}
    */
    readonly suspiciousRegistryOperations?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#suspicious_scripts_and_commands DefaultPreventionPolicyWindows#suspicious_scripts_and_commands}
    */
    readonly suspiciousScriptsAndCommands?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#upload_unknown_detection_related_executables DefaultPreventionPolicyWindows#upload_unknown_detection_related_executables}
    */
    readonly uploadUnknownDetectionRelatedExecutables?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#upload_unknown_executables DefaultPreventionPolicyWindows#upload_unknown_executables}
    */
    readonly uploadUnknownExecutables?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#usb_insertion_triggered_scan DefaultPreventionPolicyWindows#usb_insertion_triggered_scan}
    */
    readonly usbInsertionTriggeredScan?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#volume_shadow_copy_audit DefaultPreventionPolicyWindows#volume_shadow_copy_audit}
    */
    readonly volumeShadowCopyAudit?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume_shadow_copy_audit.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#volume_shadow_copy_protect DefaultPreventionPolicyWindows#volume_shadow_copy_protect}
    */
    readonly volumeShadowCopyProtect?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver_load_prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#vulnerable_driver_protection DefaultPreventionPolicyWindows#vulnerable_driver_protection}
    */
    readonly vulnerableDriverProtection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#windows_logon_bypass_sticky_keys DefaultPreventionPolicyWindows#windows_logon_bypass_sticky_keys}
    */
    readonly windowsLogonBypassStickyKeys?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into WSL2 distributions by enabling a Falcon sensor plugin.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#wsl2_visibility DefaultPreventionPolicyWindows#wsl2_visibility}
    */
    readonly wsl2Visibility?: boolean | cdktf.IResolvable;
}
export interface DefaultPreventionPolicyWindowsAdwareAndPup {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detection DefaultPreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#prevention DefaultPreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function defaultPreventionPolicyWindowsAdwareAndPupToTerraform(struct?: DefaultPreventionPolicyWindowsAdwareAndPup | cdktf.IResolvable): any;
export declare function defaultPreventionPolicyWindowsAdwareAndPupToHclTerraform(struct?: DefaultPreventionPolicyWindowsAdwareAndPup | cdktf.IResolvable): any;
export declare class DefaultPreventionPolicyWindowsAdwareAndPupOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): DefaultPreventionPolicyWindowsAdwareAndPup | cdktf.IResolvable | undefined;
    set internalValue(value: DefaultPreventionPolicyWindowsAdwareAndPup | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiated {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detection DefaultPreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#prevention DefaultPreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function defaultPreventionPolicyWindowsCloudAdwarePupUserInitiatedToTerraform(struct?: DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiated | cdktf.IResolvable): any;
export declare function defaultPreventionPolicyWindowsCloudAdwarePupUserInitiatedToHclTerraform(struct?: DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiated | cdktf.IResolvable): any;
export declare class DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiatedOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiated | cdktf.IResolvable | undefined;
    set internalValue(value: DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiated | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface DefaultPreventionPolicyWindowsCloudAntiMalware {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detection DefaultPreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#prevention DefaultPreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function defaultPreventionPolicyWindowsCloudAntiMalwareToTerraform(struct?: DefaultPreventionPolicyWindowsCloudAntiMalware | cdktf.IResolvable): any;
export declare function defaultPreventionPolicyWindowsCloudAntiMalwareToHclTerraform(struct?: DefaultPreventionPolicyWindowsCloudAntiMalware | cdktf.IResolvable): any;
export declare class DefaultPreventionPolicyWindowsCloudAntiMalwareOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): DefaultPreventionPolicyWindowsCloudAntiMalware | cdktf.IResolvable | undefined;
    set internalValue(value: DefaultPreventionPolicyWindowsCloudAntiMalware | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detection DefaultPreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#prevention DefaultPreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function defaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesToTerraform(struct?: DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles | cdktf.IResolvable): any;
export declare function defaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesToHclTerraform(struct?: DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles | cdktf.IResolvable): any;
export declare class DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles | cdktf.IResolvable | undefined;
    set internalValue(value: DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detection DefaultPreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#prevention DefaultPreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function defaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedToTerraform(struct?: DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated | cdktf.IResolvable): any;
export declare function defaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedToHclTerraform(struct?: DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated | cdktf.IResolvable): any;
export declare class DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated | cdktf.IResolvable | undefined;
    set internalValue(value: DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface DefaultPreventionPolicyWindowsExtendedUserModeData {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detection DefaultPreventionPolicyWindows#detection}
    */
    readonly detection: string;
}
export declare function defaultPreventionPolicyWindowsExtendedUserModeDataToTerraform(struct?: DefaultPreventionPolicyWindowsExtendedUserModeData | cdktf.IResolvable): any;
export declare function defaultPreventionPolicyWindowsExtendedUserModeDataToHclTerraform(struct?: DefaultPreventionPolicyWindowsExtendedUserModeData | cdktf.IResolvable): any;
export declare class DefaultPreventionPolicyWindowsExtendedUserModeDataOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): DefaultPreventionPolicyWindowsExtendedUserModeData | cdktf.IResolvable | undefined;
    set internalValue(value: DefaultPreventionPolicyWindowsExtendedUserModeData | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
}
export interface DefaultPreventionPolicyWindowsSensorAntiMalware {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detection DefaultPreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#prevention DefaultPreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function defaultPreventionPolicyWindowsSensorAntiMalwareToTerraform(struct?: DefaultPreventionPolicyWindowsSensorAntiMalware | cdktf.IResolvable): any;
export declare function defaultPreventionPolicyWindowsSensorAntiMalwareToHclTerraform(struct?: DefaultPreventionPolicyWindowsSensorAntiMalware | cdktf.IResolvable): any;
export declare class DefaultPreventionPolicyWindowsSensorAntiMalwareOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): DefaultPreventionPolicyWindowsSensorAntiMalware | cdktf.IResolvable | undefined;
    set internalValue(value: DefaultPreventionPolicyWindowsSensorAntiMalware | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#detection DefaultPreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#prevention DefaultPreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function defaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedToTerraform(struct?: DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated | cdktf.IResolvable): any;
export declare function defaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedToHclTerraform(struct?: DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated | cdktf.IResolvable): any;
export declare class DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated | cdktf.IResolvable | undefined;
    set internalValue(value: DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
/**
* Represents a {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows crowdstrike_default_prevention_policy_windows}
*/
export declare class DefaultPreventionPolicyWindows extends cdktf.TerraformResource {
    static readonly tfResourceType = "crowdstrike_default_prevention_policy_windows";
    /**
    * Generates CDKTF code for importing a DefaultPreventionPolicyWindows resource upon running "cdktf plan <stack-name>"
    * @param scope The scope in which to define this construct
    * @param importToId The construct id used in the generated config for the DefaultPreventionPolicyWindows to import
    * @param importFromId The id of the existing DefaultPreventionPolicyWindows that should be imported. Refer to the {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows#import import section} in the documentation of this resource for the id to use
    * @param provider? Optional instance of the provider where the DefaultPreventionPolicyWindows to import is found
    */
    static generateConfigForImport(scope: Construct, importToId: string, importFromId: string, provider?: cdktf.TerraformProvider): any;
    /**
    * Create a new {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/default_prevention_policy_windows crowdstrike_default_prevention_policy_windows} Resource
    *
    * @param scope The scope in which to define this construct
    * @param id The scoped construct ID. Must be unique amongst siblings in the same scope
    * @param options DefaultPreventionPolicyWindowsConfig
    */
    constructor(scope: Construct, id: string, config: DefaultPreventionPolicyWindowsConfig);
    private _additionalUserModeData?;
    get additionalUserModeData(): boolean | cdktf.IResolvable;
    set additionalUserModeData(value: boolean | cdktf.IResolvable);
    resetAdditionalUserModeData(): void;
    get additionalUserModeDataInput(): any;
    private _advancedRemediation?;
    get advancedRemediation(): boolean | cdktf.IResolvable;
    set advancedRemediation(value: boolean | cdktf.IResolvable);
    resetAdvancedRemediation(): void;
    get advancedRemediationInput(): any;
    private _adwareAndPup;
    get adwareAndPup(): DefaultPreventionPolicyWindowsAdwareAndPupOutputReference;
    putAdwareAndPup(value: DefaultPreventionPolicyWindowsAdwareAndPup): void;
    resetAdwareAndPup(): void;
    get adwareAndPupInput(): any;
    private _applicationExploitationActivity?;
    get applicationExploitationActivity(): boolean | cdktf.IResolvable;
    set applicationExploitationActivity(value: boolean | cdktf.IResolvable);
    resetApplicationExploitationActivity(): void;
    get applicationExploitationActivityInput(): any;
    private _backupDeletion?;
    get backupDeletion(): boolean | cdktf.IResolvable;
    set backupDeletion(value: boolean | cdktf.IResolvable);
    resetBackupDeletion(): void;
    get backupDeletionInput(): any;
    private _biosDeepVisibility?;
    get biosDeepVisibility(): boolean | cdktf.IResolvable;
    set biosDeepVisibility(value: boolean | cdktf.IResolvable);
    resetBiosDeepVisibility(): void;
    get biosDeepVisibilityInput(): any;
    private _bootConfigurationDatabaseProtection?;
    get bootConfigurationDatabaseProtection(): boolean | cdktf.IResolvable;
    set bootConfigurationDatabaseProtection(value: boolean | cdktf.IResolvable);
    resetBootConfigurationDatabaseProtection(): void;
    get bootConfigurationDatabaseProtectionInput(): any;
    private _chopperWebshell?;
    get chopperWebshell(): boolean | cdktf.IResolvable;
    set chopperWebshell(value: boolean | cdktf.IResolvable);
    resetChopperWebshell(): void;
    get chopperWebshellInput(): any;
    private _cloudAdwarePupUserInitiated;
    get cloudAdwarePupUserInitiated(): DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiatedOutputReference;
    putCloudAdwarePupUserInitiated(value: DefaultPreventionPolicyWindowsCloudAdwarePupUserInitiated): void;
    resetCloudAdwarePupUserInitiated(): void;
    get cloudAdwarePupUserInitiatedInput(): any;
    private _cloudAntiMalware;
    get cloudAntiMalware(): DefaultPreventionPolicyWindowsCloudAntiMalwareOutputReference;
    putCloudAntiMalware(value: DefaultPreventionPolicyWindowsCloudAntiMalware): void;
    resetCloudAntiMalware(): void;
    get cloudAntiMalwareInput(): any;
    private _cloudAntiMalwareMicrosoftOfficeFiles;
    get cloudAntiMalwareMicrosoftOfficeFiles(): DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputReference;
    putCloudAntiMalwareMicrosoftOfficeFiles(value: DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles): void;
    resetCloudAntiMalwareMicrosoftOfficeFiles(): void;
    get cloudAntiMalwareMicrosoftOfficeFilesInput(): any;
    private _cloudAntiMalwareUserInitiated;
    get cloudAntiMalwareUserInitiated(): DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputReference;
    putCloudAntiMalwareUserInitiated(value: DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated): void;
    resetCloudAntiMalwareUserInitiated(): void;
    get cloudAntiMalwareUserInitiatedInput(): any;
    private _codeInjection?;
    get codeInjection(): boolean | cdktf.IResolvable;
    set codeInjection(value: boolean | cdktf.IResolvable);
    resetCodeInjection(): void;
    get codeInjectionInput(): any;
    private _credentialDumping?;
    get credentialDumping(): boolean | cdktf.IResolvable;
    set credentialDumping(value: boolean | cdktf.IResolvable);
    resetCredentialDumping(): void;
    get credentialDumpingInput(): any;
    private _cryptowall?;
    get cryptowall(): boolean | cdktf.IResolvable;
    set cryptowall(value: boolean | cdktf.IResolvable);
    resetCryptowall(): void;
    get cryptowallInput(): any;
    private _customBlocking?;
    get customBlocking(): boolean | cdktf.IResolvable;
    set customBlocking(value: boolean | cdktf.IResolvable);
    resetCustomBlocking(): void;
    get customBlockingInput(): any;
    private _description?;
    get description(): string;
    set description(value: string);
    resetDescription(): void;
    get descriptionInput(): string;
    private _detectOnWrite?;
    get detectOnWrite(): boolean | cdktf.IResolvable;
    set detectOnWrite(value: boolean | cdktf.IResolvable);
    resetDetectOnWrite(): void;
    get detectOnWriteInput(): any;
    private _driveByDownload?;
    get driveByDownload(): boolean | cdktf.IResolvable;
    set driveByDownload(value: boolean | cdktf.IResolvable);
    resetDriveByDownload(): void;
    get driveByDownloadInput(): any;
    private _driverLoadPrevention?;
    get driverLoadPrevention(): boolean | cdktf.IResolvable;
    set driverLoadPrevention(value: boolean | cdktf.IResolvable);
    resetDriverLoadPrevention(): void;
    get driverLoadPreventionInput(): any;
    private _engineFullVisibility?;
    get engineFullVisibility(): boolean | cdktf.IResolvable;
    set engineFullVisibility(value: boolean | cdktf.IResolvable);
    resetEngineFullVisibility(): void;
    get engineFullVisibilityInput(): any;
    private _enhancedDllLoadVisibility?;
    get enhancedDllLoadVisibility(): boolean | cdktf.IResolvable;
    set enhancedDllLoadVisibility(value: boolean | cdktf.IResolvable);
    resetEnhancedDllLoadVisibility(): void;
    get enhancedDllLoadVisibilityInput(): any;
    private _enhancedExploitationVisibility?;
    get enhancedExploitationVisibility(): boolean | cdktf.IResolvable;
    set enhancedExploitationVisibility(value: boolean | cdktf.IResolvable);
    resetEnhancedExploitationVisibility(): void;
    get enhancedExploitationVisibilityInput(): any;
    private _enhancedMlForLargerFiles?;
    get enhancedMlForLargerFiles(): boolean | cdktf.IResolvable;
    set enhancedMlForLargerFiles(value: boolean | cdktf.IResolvable);
    resetEnhancedMlForLargerFiles(): void;
    get enhancedMlForLargerFilesInput(): any;
    private _extendedUserModeData;
    get extendedUserModeData(): DefaultPreventionPolicyWindowsExtendedUserModeDataOutputReference;
    putExtendedUserModeData(value: DefaultPreventionPolicyWindowsExtendedUserModeData): void;
    resetExtendedUserModeData(): void;
    get extendedUserModeDataInput(): any;
    private _fileEncryption?;
    get fileEncryption(): boolean | cdktf.IResolvable;
    set fileEncryption(value: boolean | cdktf.IResolvable);
    resetFileEncryption(): void;
    get fileEncryptionInput(): any;
    private _fileSystemAccess?;
    get fileSystemAccess(): boolean | cdktf.IResolvable;
    set fileSystemAccess(value: boolean | cdktf.IResolvable);
    resetFileSystemAccess(): void;
    get fileSystemAccessInput(): any;
    private _fileSystemContainment?;
    get fileSystemContainment(): boolean | cdktf.IResolvable;
    set fileSystemContainment(value: boolean | cdktf.IResolvable);
    resetFileSystemContainment(): void;
    get fileSystemContainmentInput(): any;
    private _forceAslr?;
    get forceAslr(): boolean | cdktf.IResolvable;
    set forceAslr(value: boolean | cdktf.IResolvable);
    resetForceAslr(): void;
    get forceAslrInput(): any;
    private _forceDep?;
    get forceDep(): boolean | cdktf.IResolvable;
    set forceDep(value: boolean | cdktf.IResolvable);
    resetForceDep(): void;
    get forceDepInput(): any;
    private _hardwareEnhancedExploitDetection?;
    get hardwareEnhancedExploitDetection(): boolean | cdktf.IResolvable;
    set hardwareEnhancedExploitDetection(value: boolean | cdktf.IResolvable);
    resetHardwareEnhancedExploitDetection(): void;
    get hardwareEnhancedExploitDetectionInput(): any;
    private _heapSprayPreallocation?;
    get heapSprayPreallocation(): boolean | cdktf.IResolvable;
    set heapSprayPreallocation(value: boolean | cdktf.IResolvable);
    resetHeapSprayPreallocation(): void;
    get heapSprayPreallocationInput(): any;
    private _httpDetections?;
    get httpDetections(): boolean | cdktf.IResolvable;
    set httpDetections(value: boolean | cdktf.IResolvable);
    resetHttpDetections(): void;
    get httpDetectionsInput(): any;
    get id(): any;
    private _intelligenceSourcedThreats?;
    get intelligenceSourcedThreats(): boolean | cdktf.IResolvable;
    set intelligenceSourcedThreats(value: boolean | cdktf.IResolvable);
    resetIntelligenceSourcedThreats(): void;
    get intelligenceSourcedThreatsInput(): any;
    private _interpreterOnly?;
    get interpreterOnly(): boolean | cdktf.IResolvable;
    set interpreterOnly(value: boolean | cdktf.IResolvable);
    resetInterpreterOnly(): void;
    get interpreterOnlyInput(): any;
    private _ioaRuleGroups?;
    get ioaRuleGroups(): string[];
    set ioaRuleGroups(value: string[]);
    get ioaRuleGroupsInput(): string[];
    private _javascriptViaRundll32?;
    get javascriptViaRundll32(): boolean | cdktf.IResolvable;
    set javascriptViaRundll32(value: boolean | cdktf.IResolvable);
    resetJavascriptViaRundll32(): void;
    get javascriptViaRundll32Input(): any;
    get lastUpdated(): any;
    private _locky?;
    get locky(): boolean | cdktf.IResolvable;
    set locky(value: boolean | cdktf.IResolvable);
    resetLocky(): void;
    get lockyInput(): any;
    private _memoryScanning?;
    get memoryScanning(): boolean | cdktf.IResolvable;
    set memoryScanning(value: boolean | cdktf.IResolvable);
    resetMemoryScanning(): void;
    get memoryScanningInput(): any;
    private _memoryScanningScanWithCpu?;
    get memoryScanningScanWithCpu(): boolean | cdktf.IResolvable;
    set memoryScanningScanWithCpu(value: boolean | cdktf.IResolvable);
    resetMemoryScanningScanWithCpu(): void;
    get memoryScanningScanWithCpuInput(): any;
    private _microsoftOfficeFileSuspiciousMacroRemoval?;
    get microsoftOfficeFileSuspiciousMacroRemoval(): boolean | cdktf.IResolvable;
    set microsoftOfficeFileSuspiciousMacroRemoval(value: boolean | cdktf.IResolvable);
    resetMicrosoftOfficeFileSuspiciousMacroRemoval(): void;
    get microsoftOfficeFileSuspiciousMacroRemovalInput(): any;
    private _notifyEndUsers?;
    get notifyEndUsers(): boolean | cdktf.IResolvable;
    set notifyEndUsers(value: boolean | cdktf.IResolvable);
    resetNotifyEndUsers(): void;
    get notifyEndUsersInput(): any;
    private _nullPageAllocation?;
    get nullPageAllocation(): boolean | cdktf.IResolvable;
    set nullPageAllocation(value: boolean | cdktf.IResolvable);
    resetNullPageAllocation(): void;
    get nullPageAllocationInput(): any;
    private _onWriteScriptFileVisibility?;
    get onWriteScriptFileVisibility(): boolean | cdktf.IResolvable;
    set onWriteScriptFileVisibility(value: boolean | cdktf.IResolvable);
    resetOnWriteScriptFileVisibility(): void;
    get onWriteScriptFileVisibilityInput(): any;
    private _preventSuspiciousProcesses?;
    get preventSuspiciousProcesses(): boolean | cdktf.IResolvable;
    set preventSuspiciousProcesses(value: boolean | cdktf.IResolvable);
    resetPreventSuspiciousProcesses(): void;
    get preventSuspiciousProcessesInput(): any;
    private _quarantineAndSecurityCenterRegistration?;
    get quarantineAndSecurityCenterRegistration(): boolean | cdktf.IResolvable;
    set quarantineAndSecurityCenterRegistration(value: boolean | cdktf.IResolvable);
    resetQuarantineAndSecurityCenterRegistration(): void;
    get quarantineAndSecurityCenterRegistrationInput(): any;
    private _quarantineOnRemovableMedia?;
    get quarantineOnRemovableMedia(): boolean | cdktf.IResolvable;
    set quarantineOnRemovableMedia(value: boolean | cdktf.IResolvable);
    resetQuarantineOnRemovableMedia(): void;
    get quarantineOnRemovableMediaInput(): any;
    private _quarantineOnWrite?;
    get quarantineOnWrite(): boolean | cdktf.IResolvable;
    set quarantineOnWrite(value: boolean | cdktf.IResolvable);
    resetQuarantineOnWrite(): void;
    get quarantineOnWriteInput(): any;
    private _redactHttpDetectionDetails?;
    get redactHttpDetectionDetails(): boolean | cdktf.IResolvable;
    set redactHttpDetectionDetails(value: boolean | cdktf.IResolvable);
    resetRedactHttpDetectionDetails(): void;
    get redactHttpDetectionDetailsInput(): any;
    private _scriptBasedExecutionMonitoring?;
    get scriptBasedExecutionMonitoring(): boolean | cdktf.IResolvable;
    set scriptBasedExecutionMonitoring(value: boolean | cdktf.IResolvable);
    resetScriptBasedExecutionMonitoring(): void;
    get scriptBasedExecutionMonitoringInput(): any;
    private _sehOverwriteProtection?;
    get sehOverwriteProtection(): boolean | cdktf.IResolvable;
    set sehOverwriteProtection(value: boolean | cdktf.IResolvable);
    resetSehOverwriteProtection(): void;
    get sehOverwriteProtectionInput(): any;
    private _sensorAntiMalware;
    get sensorAntiMalware(): DefaultPreventionPolicyWindowsSensorAntiMalwareOutputReference;
    putSensorAntiMalware(value: DefaultPreventionPolicyWindowsSensorAntiMalware): void;
    resetSensorAntiMalware(): void;
    get sensorAntiMalwareInput(): any;
    private _sensorAntiMalwareUserInitiated;
    get sensorAntiMalwareUserInitiated(): DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputReference;
    putSensorAntiMalwareUserInitiated(value: DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated): void;
    resetSensorAntiMalwareUserInitiated(): void;
    get sensorAntiMalwareUserInitiatedInput(): any;
    private _sensorTamperingProtection?;
    get sensorTamperingProtection(): boolean | cdktf.IResolvable;
    set sensorTamperingProtection(value: boolean | cdktf.IResolvable);
    resetSensorTamperingProtection(): void;
    get sensorTamperingProtectionInput(): any;
    private _suspiciousFileAnalysis?;
    get suspiciousFileAnalysis(): boolean | cdktf.IResolvable;
    set suspiciousFileAnalysis(value: boolean | cdktf.IResolvable);
    resetSuspiciousFileAnalysis(): void;
    get suspiciousFileAnalysisInput(): any;
    private _suspiciousRegistryOperations?;
    get suspiciousRegistryOperations(): boolean | cdktf.IResolvable;
    set suspiciousRegistryOperations(value: boolean | cdktf.IResolvable);
    resetSuspiciousRegistryOperations(): void;
    get suspiciousRegistryOperationsInput(): any;
    private _suspiciousScriptsAndCommands?;
    get suspiciousScriptsAndCommands(): boolean | cdktf.IResolvable;
    set suspiciousScriptsAndCommands(value: boolean | cdktf.IResolvable);
    resetSuspiciousScriptsAndCommands(): void;
    get suspiciousScriptsAndCommandsInput(): any;
    private _uploadUnknownDetectionRelatedExecutables?;
    get uploadUnknownDetectionRelatedExecutables(): boolean | cdktf.IResolvable;
    set uploadUnknownDetectionRelatedExecutables(value: boolean | cdktf.IResolvable);
    resetUploadUnknownDetectionRelatedExecutables(): void;
    get uploadUnknownDetectionRelatedExecutablesInput(): any;
    private _uploadUnknownExecutables?;
    get uploadUnknownExecutables(): boolean | cdktf.IResolvable;
    set uploadUnknownExecutables(value: boolean | cdktf.IResolvable);
    resetUploadUnknownExecutables(): void;
    get uploadUnknownExecutablesInput(): any;
    private _usbInsertionTriggeredScan?;
    get usbInsertionTriggeredScan(): boolean | cdktf.IResolvable;
    set usbInsertionTriggeredScan(value: boolean | cdktf.IResolvable);
    resetUsbInsertionTriggeredScan(): void;
    get usbInsertionTriggeredScanInput(): any;
    private _volumeShadowCopyAudit?;
    get volumeShadowCopyAudit(): boolean | cdktf.IResolvable;
    set volumeShadowCopyAudit(value: boolean | cdktf.IResolvable);
    resetVolumeShadowCopyAudit(): void;
    get volumeShadowCopyAuditInput(): any;
    private _volumeShadowCopyProtect?;
    get volumeShadowCopyProtect(): boolean | cdktf.IResolvable;
    set volumeShadowCopyProtect(value: boolean | cdktf.IResolvable);
    resetVolumeShadowCopyProtect(): void;
    get volumeShadowCopyProtectInput(): any;
    private _vulnerableDriverProtection?;
    get vulnerableDriverProtection(): boolean | cdktf.IResolvable;
    set vulnerableDriverProtection(value: boolean | cdktf.IResolvable);
    resetVulnerableDriverProtection(): void;
    get vulnerableDriverProtectionInput(): any;
    private _windowsLogonBypassStickyKeys?;
    get windowsLogonBypassStickyKeys(): boolean | cdktf.IResolvable;
    set windowsLogonBypassStickyKeys(value: boolean | cdktf.IResolvable);
    resetWindowsLogonBypassStickyKeys(): void;
    get windowsLogonBypassStickyKeysInput(): any;
    private _wsl2Visibility?;
    get wsl2Visibility(): boolean | cdktf.IResolvable;
    set wsl2Visibility(value: boolean | cdktf.IResolvable);
    resetWsl2Visibility(): void;
    get wsl2VisibilityInput(): any;
    protected synthesizeAttributes(): {
        [name: string]: any;
    };
    protected synthesizeHclAttributes(): {
        [name: string]: any;
    };
}