import { Construct } from 'constructs';
import * as cdktf from 'cdktf';
export interface PreventionPolicyWindowsConfig extends cdktf.TerraformMetaArguments {
    /**
    * Whether to enable the setting. Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#additional_user_mode_data PreventionPolicyWindows#additional_user_mode_data}
    */
    readonly additionalUserModeData?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Perform advanced remediation for IOA detections to kill processes, quarantine files, remove scheduled tasks, and clear and delete ASEP registry values.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#advanced_remediation PreventionPolicyWindows#advanced_remediation}
    */
    readonly advancedRemediation?: boolean | cdktf.IResolvable;
    /**
    * Use cloud-based machine learning informed by global analysis of executables to detect and prevent adware and potentially unwanted programs (PUP) for your online hosts.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#adware_and_pup PreventionPolicyWindows#adware_and_pup}
    */
    readonly adwareAndPup?: PreventionPolicyWindowsAdwareAndPup;
    /**
    * Whether to enable the setting. Creation of a process, such as a command prompt, from an exploited browser or browser flash plugin was blocked.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#application_exploitation_activity PreventionPolicyWindows#application_exploitation_activity}
    */
    readonly applicationExploitationActivity?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Deletion of backups often indicative of ransomware activity.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#backup_deletion PreventionPolicyWindows#backup_deletion}
    */
    readonly backupDeletion?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into BIOS. Detects suspicious and unexpected images. Recommend testing to monitor system startup performance before full deployment.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#bios_deep_visibility PreventionPolicyWindows#bios_deep_visibility}
    */
    readonly biosDeepVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block BCD registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as security config changes. The associated process may be killed. Requires suspicious_registry_operations to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#boot_configuration_database_protection PreventionPolicyWindows#boot_configuration_database_protection}
    */
    readonly bootConfigurationDatabaseProtection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Execution of a command shell was blocked and is indicative of the system hosting a Chopper web page.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#chopper_webshell PreventionPolicyWindows#chopper_webshell}
    */
    readonly chopperWebshell?: boolean | cdktf.IResolvable;
    /**
    * For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known PUP and Adware.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#cloud_adware_pup_user_initiated PreventionPolicyWindows#cloud_adware_pup_user_initiated}
    */
    readonly cloudAdwarePupUserInitiated?: PreventionPolicyWindowsCloudAdwarePupUserInitiated;
    /**
    * Use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware for your online hosts.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#cloud_anti_malware PreventionPolicyWindows#cloud_anti_malware}
    */
    readonly cloudAntiMalware?: PreventionPolicyWindowsCloudAntiMalware;
    /**
    * Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#cloud_anti_malware_microsoft_office_files PreventionPolicyWindows#cloud_anti_malware_microsoft_office_files}
    */
    readonly cloudAntiMalwareMicrosoftOfficeFiles?: PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles;
    /**
    * For online hosts running on-demand scans initiated by end users, use cloud-based machine learning informed by global analysis of executables to detect and prevent known malware.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#cloud_anti_malware_user_initiated PreventionPolicyWindows#cloud_anti_malware_user_initiated}
    */
    readonly cloudAntiMalwareUserInitiated?: PreventionPolicyWindowsCloudAntiMalwareUserInitiated;
    /**
    * Whether to enable the setting. Kill processes that unexpectedly injected code into another process. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#code_injection PreventionPolicyWindows#code_injection}
    */
    readonly codeInjection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Kill suspicious processes determined to be stealing logins and passwords. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#credential_dumping PreventionPolicyWindows#credential_dumping}
    */
    readonly credentialDumping?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A process associated with Cryptowall was blocked.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#cryptowall PreventionPolicyWindows#cryptowall}
    */
    readonly cryptowall?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#custom_blocking PreventionPolicyWindows#custom_blocking}
    */
    readonly customBlocking?: boolean | cdktf.IResolvable;
    /**
    * Description of the prevention policy.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#description PreventionPolicyWindows#description}
    */
    readonly description?: string;
    /**
    * Whether to enable the setting. Use machine learning to analyze suspicious files when they're written to disk. To adjust detection sensitivity, change Anti-malware Detection levels in Sensor Machine Learning and Cloud Machine Learning.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detect_on_write PreventionPolicyWindows#detect_on_write}
    */
    readonly detectOnWrite?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A suspicious file written by a browser attempted to execute and was blocked.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#drive_by_download PreventionPolicyWindows#drive_by_download}
    */
    readonly driveByDownload?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block the loading of kernel drivers that CrowdStrike analysts have identified as malicious. Available on Windows 10 and Windows Server 2016 and later.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#driver_load_prevention PreventionPolicyWindows#driver_load_prevention}
    */
    readonly driverLoadPrevention?: boolean | cdktf.IResolvable;
    /**
    * Enable the prevention policy.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#enabled PreventionPolicyWindows#enabled}
    */
    readonly enabled?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into malicious System Management Automation engine usage by any application. Requires interpreter_only to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#engine_full_visibility PreventionPolicyWindows#engine_full_visibility}
    */
    readonly engineFullVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. For hosts running Windows Server, increases sensor visibility of loaded DLLs. Improves detection coverage and telemetry, but may cause a small performance impact. Recommend testing with critical applications before full deployment.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#enhanced_dll_load_visibility PreventionPolicyWindows#enhanced_dll_load_visibility}
    */
    readonly enhancedDllLoadVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. For hosts running Windows 10 1809 and Server 2019 and later, provides additional visibility into common exploitation techniques used to weaken or circumvent application security.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#enhanced_exploitation_visibility PreventionPolicyWindows#enhanced_exploitation_visibility}
    */
    readonly enhancedExploitationVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Expand ML file size coverage. Existing ML level settings apply.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#enhanced_ml_for_larger_files PreventionPolicyWindows#enhanced_ml_for_larger_files}
    */
    readonly enhancedMlForLargerFiles?: boolean | cdktf.IResolvable;
    /**
    * Allows the sensor to get more data from a user-mode component it loads into all eligible processes, which augments online machine learning and turns on additional detections. Recommend testing with critical applications before full deployment.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#extended_user_mode_data PreventionPolicyWindows#extended_user_mode_data}
    */
    readonly extendedUserModeData?: PreventionPolicyWindowsExtendedUserModeData;
    /**
    * Whether to enable the setting. A process that created a file with a known ransomware extension was terminated.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#file_encryption PreventionPolicyWindows#file_encryption}
    */
    readonly fileEncryption?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A process associated with a high volume of file system operations typical of ransomware behavior was terminated.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#file_system_access PreventionPolicyWindows#file_system_access}
    */
    readonly fileSystemAccess?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. File System Containment will be enabled, this will allow prevention capabilities to automatically contain file system activity.  When disabled each user under active containment will be released and the File System Containment will enter a disabled mode
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#file_system_containment PreventionPolicyWindows#file_system_containment}
    */
    readonly fileSystemContainment?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. An Address Space Layout Randomization (ASLR) bypass attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#force_aslr PreventionPolicyWindows#force_aslr}
    */
    readonly forceAslr?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A process that had Force Data Execution Prevention (Force DEP) applied tried to execute non-executable memory and was blocked. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#force_dep PreventionPolicyWindows#force_dep}
    */
    readonly forceDep?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides additional visibility into application exploits by using CPU hardware features that detect suspicious control flows. Available only for hosts running Windows 10 (RS4) or Windows Server 2016 Version 1803 or later and Skylake or later CPU.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#hardware_enhanced_exploit_detection PreventionPolicyWindows#hardware_enhanced_exploit_detection}
    */
    readonly hardwareEnhancedExploitDetection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A heap spray attempt was detected and blocked. This may have been part of an attempted exploit. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#heap_spray_preallocation PreventionPolicyWindows#heap_spray_preallocation}
    */
    readonly heapSprayPreallocation?: boolean | cdktf.IResolvable;
    /**
    * Host Group ids to attach to the prevention policy.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#host_groups PreventionPolicyWindows#host_groups}
    */
    readonly hostGroups: string[];
    /**
    * Whether to enable the setting. Allows the sensor to monitor unencrypted HTTP traffic and certain encrypted HTTPS traffic on the sensor for malicious patterns and generate detection events on non-Server systems.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#http_detections PreventionPolicyWindows#http_detections}
    */
    readonly httpDetections?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block processes that CrowdStrike Intelligence analysts classify as malicious. These are focused on static hash-based IOCs.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#intelligence_sourced_threats PreventionPolicyWindows#intelligence_sourced_threats}
    */
    readonly intelligenceSourcedThreats?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into malicious PowerShell interpreter usage. For hosts running Windows 10, Script-Based Execution Monitoring may be used instead.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#interpreter_only PreventionPolicyWindows#interpreter_only}
    */
    readonly interpreterOnly?: boolean | cdktf.IResolvable;
    /**
    * IOA Rule Group to attach to the prevention policy.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#ioa_rule_groups PreventionPolicyWindows#ioa_rule_groups}
    */
    readonly ioaRuleGroups: string[];
    /**
    * Whether to enable the setting. JavaScript executing from a command line via rundll32.exe was prevented.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#javascript_via_rundll32 PreventionPolicyWindows#javascript_via_rundll32}
    */
    readonly javascriptViaRundll32?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A process determined to be associated with Locky was blocked.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#locky PreventionPolicyWindows#locky}
    */
    readonly locky?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into in-memory attacks by scanning for suspicious artifacts on hosts with the following: an integrated GPU and supporting OS libraries, Windows 10 v1607 (RS1) or later, and a Skylake or newer Intel CPU.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#memory_scanning PreventionPolicyWindows#memory_scanning}
    */
    readonly memoryScanning?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Allows memory scanning to use the CPU or virtual CPU when an integrated GPU is not available. All Intel processors supported, requires Windows 8.1/2012 R2 or later.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#memory_scanning_scan_with_cpu PreventionPolicyWindows#memory_scanning_scan_with_cpu}
    */
    readonly memoryScanningScanWithCpu?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Identifies potentially malicious macros in Microsoft Office files and, if prevention is enabled, either quarantines the file or removes the malicious macros before releasing the file back to the host
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#microsoft_office_file_suspicious_macro_removal PreventionPolicyWindows#microsoft_office_file_suspicious_macro_removal}
    */
    readonly microsoftOfficeFileSuspiciousMacroRemoval?: boolean | cdktf.IResolvable;
    /**
    * Name of the prevention policy.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#name PreventionPolicyWindows#name}
    */
    readonly name: string;
    /**
    * Whether to enable the setting. Show a pop-up notification to the end user when the Falcon sensor blocks, kills, or quarantines. These messages also show up in the Windows Event Viewer under Applications and Service Logs.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#notify_end_users PreventionPolicyWindows#notify_end_users}
    */
    readonly notifyEndUsers?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Allocating memory to the NULL (0) memory page was detected and blocked. This may have been part of an attempted exploit. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#null_page_allocation PreventionPolicyWindows#null_page_allocation}
    */
    readonly nullPageAllocation?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides improved visibility into various script files being written to disk in addition to clouding a portion of their content.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#on_write_script_file_visibility PreventionPolicyWindows#on_write_script_file_visibility}
    */
    readonly onWriteScriptFileVisibility?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block processes that CrowdStrike analysts classify as suspicious. These are focused on dynamic IOAs, such as malware, exploits and other threats.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#prevent_suspicious_processes PreventionPolicyWindows#prevent_suspicious_processes}
    */
    readonly preventSuspiciousProcesses?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV. When this is enabled, we recommend setting anti-malware prevention levels to Moderate or higher and not using other antivirus solutions. CrowdStrike Falcon registers with Windows Security Center, disabling Windows Defender.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#quarantine_and_security_center_registration PreventionPolicyWindows#quarantine_and_security_center_registration}
    */
    readonly quarantineAndSecurityCenterRegistration?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Quarantine executable files after they’re prevented by NGAV.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#quarantine_on_removable_media PreventionPolicyWindows#quarantine_on_removable_media}
    */
    readonly quarantineOnRemovableMedia?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Use machine learning to quarantine suspicious files when they're written to disk. To adjust quarantine sensitivity, change Anti-malware Prevention levels in Sensor Machine Learning and Cloud Machine Learning.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#quarantine_on_write PreventionPolicyWindows#quarantine_on_write}
    */
    readonly quarantineOnWrite?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Remove certain information from HTTP Detection events, including URL, raw HTTP header and POST bodies if they were present. This does not affect the generation of HTTP Detections, only additional details that would be included and may include personal information (depending on the malware in question). When disabled, the information is used to improve the response to detection events. Has no effect unless HTTP Detections is also enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#redact_http_detection_details PreventionPolicyWindows#redact_http_detection_details}
    */
    readonly redactHttpDetectionDetails?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. For hosts running Windows 10 and Servers 2016 and later, provides visibility into suspicious scripts and VBA macros in Office documents. Requires Quarantine & Security Center Registration toggle to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#script_based_execution_monitoring PreventionPolicyWindows#script_based_execution_monitoring}
    */
    readonly scriptBasedExecutionMonitoring?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Overwriting a Structured Exception Handler (SEH) was detected and may have been blocked. This may have been part of an attempted exploit. Requires additional_user_mode_data to be enabled.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#seh_overwrite_protection PreventionPolicyWindows#seh_overwrite_protection}
    */
    readonly sehOverwriteProtection?: boolean | cdktf.IResolvable;
    /**
    * For offline and online hosts, use sensor-based machine learning to identify and analyze unknown executables as they run to detect and prevent malware.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#sensor_anti_malware PreventionPolicyWindows#sensor_anti_malware}
    */
    readonly sensorAntiMalware?: PreventionPolicyWindowsSensorAntiMalware;
    /**
    * For offline and online hosts running on-demand scans initiated by end users, use sensor-based machine learning to identify and analyze unknown executables to detect and prevent malware.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#sensor_anti_malware_user_initiated PreventionPolicyWindows#sensor_anti_malware_user_initiated}
    */
    readonly sensorAntiMalwareUserInitiated?: PreventionPolicyWindowsSensorAntiMalwareUserInitiated;
    /**
    * Whether to enable the setting. Blocks attempts to tamper with the sensor. If disabled, the sensor still creates detections for tampering attempts but doesn’t block them. Disabling not recommended.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#sensor_tampering_protection PreventionPolicyWindows#sensor_tampering_protection}
    */
    readonly sensorTamperingProtection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Upload suspicious files for advanced threat analysis with QuickScan Pro.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#suspicious_file_analysis PreventionPolicyWindows#suspicious_file_analysis}
    */
    readonly suspiciousFileAnalysis?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block registry operations that CrowdStrike analysts classify as suspicious. Focuses on dynamic IOAs, such as ASEPs and security config changes. The associated process may be killed.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#suspicious_registry_operations PreventionPolicyWindows#suspicious_registry_operations}
    */
    readonly suspiciousRegistryOperations?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Block execution of scripts and commands that CrowdStrike analysts classify as suspicious. Requires Interpreter-Only and/or Script-Based Execution Monitoring.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#suspicious_scripts_and_commands PreventionPolicyWindows#suspicious_scripts_and_commands}
    */
    readonly suspiciousScriptsAndCommands?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Upload all unknown detection-related executables for advanced analysis in the cloud.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#upload_unknown_detection_related_executables PreventionPolicyWindows#upload_unknown_detection_related_executables}
    */
    readonly uploadUnknownDetectionRelatedExecutables?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Upload all unknown executables for advanced analysis in the cloud.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#upload_unknown_executables PreventionPolicyWindows#upload_unknown_executables}
    */
    readonly uploadUnknownExecutables?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Start an on-demand scan when an end user inserts a USB device. To adjust detection sensitivity, change Anti-malware Detection levels in On-Demand Scans Machine Learning.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#usb_insertion_triggered_scan PreventionPolicyWindows#usb_insertion_triggered_scan}
    */
    readonly usbInsertionTriggeredScan?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Create an alert when a suspicious process deletes volume shadow copies. Recommended: Use audit mode with a test group to try allowlisting trusted software before turning on Protect.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#volume_shadow_copy_audit PreventionPolicyWindows#volume_shadow_copy_audit}
    */
    readonly volumeShadowCopyAudit?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Prevent suspicious processes from deleting volume shadow copies. Requires volume_shadow_copy_audit.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#volume_shadow_copy_protect PreventionPolicyWindows#volume_shadow_copy_protect}
    */
    readonly volumeShadowCopyProtect?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Quarantine and block the loading of newly written kernel drivers that CrowdStrike analysts have identified as vulnerable. Available on Windows 10 and Windows 2016 and later. Requires driver_load_prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#vulnerable_driver_protection PreventionPolicyWindows#vulnerable_driver_protection}
    */
    readonly vulnerableDriverProtection?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. A command line process associated with Windows logon bypass was prevented from executing.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#windows_logon_bypass_sticky_keys PreventionPolicyWindows#windows_logon_bypass_sticky_keys}
    */
    readonly windowsLogonBypassStickyKeys?: boolean | cdktf.IResolvable;
    /**
    * Whether to enable the setting. Provides visibility into WSL2 distributions by enabling a Falcon sensor plugin.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#wsl2_visibility PreventionPolicyWindows#wsl2_visibility}
    */
    readonly wsl2Visibility?: boolean | cdktf.IResolvable;
}
export interface PreventionPolicyWindowsAdwareAndPup {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detection PreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#prevention PreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function preventionPolicyWindowsAdwareAndPupToTerraform(struct?: PreventionPolicyWindowsAdwareAndPup | cdktf.IResolvable): any;
export declare function preventionPolicyWindowsAdwareAndPupToHclTerraform(struct?: PreventionPolicyWindowsAdwareAndPup | cdktf.IResolvable): any;
export declare class PreventionPolicyWindowsAdwareAndPupOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): PreventionPolicyWindowsAdwareAndPup | cdktf.IResolvable | undefined;
    set internalValue(value: PreventionPolicyWindowsAdwareAndPup | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface PreventionPolicyWindowsCloudAdwarePupUserInitiated {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detection PreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#prevention PreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function preventionPolicyWindowsCloudAdwarePupUserInitiatedToTerraform(struct?: PreventionPolicyWindowsCloudAdwarePupUserInitiated | cdktf.IResolvable): any;
export declare function preventionPolicyWindowsCloudAdwarePupUserInitiatedToHclTerraform(struct?: PreventionPolicyWindowsCloudAdwarePupUserInitiated | cdktf.IResolvable): any;
export declare class PreventionPolicyWindowsCloudAdwarePupUserInitiatedOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): PreventionPolicyWindowsCloudAdwarePupUserInitiated | cdktf.IResolvable | undefined;
    set internalValue(value: PreventionPolicyWindowsCloudAdwarePupUserInitiated | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface PreventionPolicyWindowsCloudAntiMalware {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detection PreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#prevention PreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function preventionPolicyWindowsCloudAntiMalwareToTerraform(struct?: PreventionPolicyWindowsCloudAntiMalware | cdktf.IResolvable): any;
export declare function preventionPolicyWindowsCloudAntiMalwareToHclTerraform(struct?: PreventionPolicyWindowsCloudAntiMalware | cdktf.IResolvable): any;
export declare class PreventionPolicyWindowsCloudAntiMalwareOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): PreventionPolicyWindowsCloudAntiMalware | cdktf.IResolvable | undefined;
    set internalValue(value: PreventionPolicyWindowsCloudAntiMalware | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detection PreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#prevention PreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function preventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesToTerraform(struct?: PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles | cdktf.IResolvable): any;
export declare function preventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesToHclTerraform(struct?: PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles | cdktf.IResolvable): any;
export declare class PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles | cdktf.IResolvable | undefined;
    set internalValue(value: PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface PreventionPolicyWindowsCloudAntiMalwareUserInitiated {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detection PreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#prevention PreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function preventionPolicyWindowsCloudAntiMalwareUserInitiatedToTerraform(struct?: PreventionPolicyWindowsCloudAntiMalwareUserInitiated | cdktf.IResolvable): any;
export declare function preventionPolicyWindowsCloudAntiMalwareUserInitiatedToHclTerraform(struct?: PreventionPolicyWindowsCloudAntiMalwareUserInitiated | cdktf.IResolvable): any;
export declare class PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): PreventionPolicyWindowsCloudAntiMalwareUserInitiated | cdktf.IResolvable | undefined;
    set internalValue(value: PreventionPolicyWindowsCloudAntiMalwareUserInitiated | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface PreventionPolicyWindowsExtendedUserModeData {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detection PreventionPolicyWindows#detection}
    */
    readonly detection: string;
}
export declare function preventionPolicyWindowsExtendedUserModeDataToTerraform(struct?: PreventionPolicyWindowsExtendedUserModeData | cdktf.IResolvable): any;
export declare function preventionPolicyWindowsExtendedUserModeDataToHclTerraform(struct?: PreventionPolicyWindowsExtendedUserModeData | cdktf.IResolvable): any;
export declare class PreventionPolicyWindowsExtendedUserModeDataOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): PreventionPolicyWindowsExtendedUserModeData | cdktf.IResolvable | undefined;
    set internalValue(value: PreventionPolicyWindowsExtendedUserModeData | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
}
export interface PreventionPolicyWindowsSensorAntiMalware {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detection PreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#prevention PreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function preventionPolicyWindowsSensorAntiMalwareToTerraform(struct?: PreventionPolicyWindowsSensorAntiMalware | cdktf.IResolvable): any;
export declare function preventionPolicyWindowsSensorAntiMalwareToHclTerraform(struct?: PreventionPolicyWindowsSensorAntiMalware | cdktf.IResolvable): any;
export declare class PreventionPolicyWindowsSensorAntiMalwareOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): PreventionPolicyWindowsSensorAntiMalware | cdktf.IResolvable | undefined;
    set internalValue(value: PreventionPolicyWindowsSensorAntiMalware | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
export interface PreventionPolicyWindowsSensorAntiMalwareUserInitiated {
    /**
    * Machine learning level for detection.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#detection PreventionPolicyWindows#detection}
    */
    readonly detection: string;
    /**
    * Machine learning level for prevention.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#prevention PreventionPolicyWindows#prevention}
    */
    readonly prevention: string;
}
export declare function preventionPolicyWindowsSensorAntiMalwareUserInitiatedToTerraform(struct?: PreventionPolicyWindowsSensorAntiMalwareUserInitiated | cdktf.IResolvable): any;
export declare function preventionPolicyWindowsSensorAntiMalwareUserInitiatedToHclTerraform(struct?: PreventionPolicyWindowsSensorAntiMalwareUserInitiated | cdktf.IResolvable): any;
export declare class PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string);
    get internalValue(): PreventionPolicyWindowsSensorAntiMalwareUserInitiated | cdktf.IResolvable | undefined;
    set internalValue(value: PreventionPolicyWindowsSensorAntiMalwareUserInitiated | cdktf.IResolvable | undefined);
    private _detection?;
    get detection(): string;
    set detection(value: string);
    get detectionInput(): string;
    private _prevention?;
    get prevention(): string;
    set prevention(value: string);
    get preventionInput(): string;
}
/**
* Represents a {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows crowdstrike_prevention_policy_windows}
*/
export declare class PreventionPolicyWindows extends cdktf.TerraformResource {
    static readonly tfResourceType = "crowdstrike_prevention_policy_windows";
    /**
    * Generates CDKTF code for importing a PreventionPolicyWindows resource upon running "cdktf plan <stack-name>"
    * @param scope The scope in which to define this construct
    * @param importToId The construct id used in the generated config for the PreventionPolicyWindows to import
    * @param importFromId The id of the existing PreventionPolicyWindows that should be imported. Refer to the {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows#import import section} in the documentation of this resource for the id to use
    * @param provider? Optional instance of the provider where the PreventionPolicyWindows to import is found
    */
    static generateConfigForImport(scope: Construct, importToId: string, importFromId: string, provider?: cdktf.TerraformProvider): any;
    /**
    * Create a new {@link https://registry.terraform.io/providers/crowdstrike/crowdstrike/0.0.53/docs/resources/prevention_policy_windows crowdstrike_prevention_policy_windows} Resource
    *
    * @param scope The scope in which to define this construct
    * @param id The scoped construct ID. Must be unique amongst siblings in the same scope
    * @param options PreventionPolicyWindowsConfig
    */
    constructor(scope: Construct, id: string, config: PreventionPolicyWindowsConfig);
    private _additionalUserModeData?;
    get additionalUserModeData(): boolean | cdktf.IResolvable;
    set additionalUserModeData(value: boolean | cdktf.IResolvable);
    resetAdditionalUserModeData(): void;
    get additionalUserModeDataInput(): any;
    private _advancedRemediation?;
    get advancedRemediation(): boolean | cdktf.IResolvable;
    set advancedRemediation(value: boolean | cdktf.IResolvable);
    resetAdvancedRemediation(): void;
    get advancedRemediationInput(): any;
    private _adwareAndPup;
    get adwareAndPup(): PreventionPolicyWindowsAdwareAndPupOutputReference;
    putAdwareAndPup(value: PreventionPolicyWindowsAdwareAndPup): void;
    resetAdwareAndPup(): void;
    get adwareAndPupInput(): any;
    private _applicationExploitationActivity?;
    get applicationExploitationActivity(): boolean | cdktf.IResolvable;
    set applicationExploitationActivity(value: boolean | cdktf.IResolvable);
    resetApplicationExploitationActivity(): void;
    get applicationExploitationActivityInput(): any;
    private _backupDeletion?;
    get backupDeletion(): boolean | cdktf.IResolvable;
    set backupDeletion(value: boolean | cdktf.IResolvable);
    resetBackupDeletion(): void;
    get backupDeletionInput(): any;
    private _biosDeepVisibility?;
    get biosDeepVisibility(): boolean | cdktf.IResolvable;
    set biosDeepVisibility(value: boolean | cdktf.IResolvable);
    resetBiosDeepVisibility(): void;
    get biosDeepVisibilityInput(): any;
    private _bootConfigurationDatabaseProtection?;
    get bootConfigurationDatabaseProtection(): boolean | cdktf.IResolvable;
    set bootConfigurationDatabaseProtection(value: boolean | cdktf.IResolvable);
    resetBootConfigurationDatabaseProtection(): void;
    get bootConfigurationDatabaseProtectionInput(): any;
    private _chopperWebshell?;
    get chopperWebshell(): boolean | cdktf.IResolvable;
    set chopperWebshell(value: boolean | cdktf.IResolvable);
    resetChopperWebshell(): void;
    get chopperWebshellInput(): any;
    private _cloudAdwarePupUserInitiated;
    get cloudAdwarePupUserInitiated(): PreventionPolicyWindowsCloudAdwarePupUserInitiatedOutputReference;
    putCloudAdwarePupUserInitiated(value: PreventionPolicyWindowsCloudAdwarePupUserInitiated): void;
    resetCloudAdwarePupUserInitiated(): void;
    get cloudAdwarePupUserInitiatedInput(): any;
    private _cloudAntiMalware;
    get cloudAntiMalware(): PreventionPolicyWindowsCloudAntiMalwareOutputReference;
    putCloudAntiMalware(value: PreventionPolicyWindowsCloudAntiMalware): void;
    resetCloudAntiMalware(): void;
    get cloudAntiMalwareInput(): any;
    private _cloudAntiMalwareMicrosoftOfficeFiles;
    get cloudAntiMalwareMicrosoftOfficeFiles(): PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFilesOutputReference;
    putCloudAntiMalwareMicrosoftOfficeFiles(value: PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles): void;
    resetCloudAntiMalwareMicrosoftOfficeFiles(): void;
    get cloudAntiMalwareMicrosoftOfficeFilesInput(): any;
    private _cloudAntiMalwareUserInitiated;
    get cloudAntiMalwareUserInitiated(): PreventionPolicyWindowsCloudAntiMalwareUserInitiatedOutputReference;
    putCloudAntiMalwareUserInitiated(value: PreventionPolicyWindowsCloudAntiMalwareUserInitiated): void;
    resetCloudAntiMalwareUserInitiated(): void;
    get cloudAntiMalwareUserInitiatedInput(): any;
    private _codeInjection?;
    get codeInjection(): boolean | cdktf.IResolvable;
    set codeInjection(value: boolean | cdktf.IResolvable);
    resetCodeInjection(): void;
    get codeInjectionInput(): any;
    private _credentialDumping?;
    get credentialDumping(): boolean | cdktf.IResolvable;
    set credentialDumping(value: boolean | cdktf.IResolvable);
    resetCredentialDumping(): void;
    get credentialDumpingInput(): any;
    private _cryptowall?;
    get cryptowall(): boolean | cdktf.IResolvable;
    set cryptowall(value: boolean | cdktf.IResolvable);
    resetCryptowall(): void;
    get cryptowallInput(): any;
    private _customBlocking?;
    get customBlocking(): boolean | cdktf.IResolvable;
    set customBlocking(value: boolean | cdktf.IResolvable);
    resetCustomBlocking(): void;
    get customBlockingInput(): any;
    private _description?;
    get description(): string;
    set description(value: string);
    resetDescription(): void;
    get descriptionInput(): string;
    private _detectOnWrite?;
    get detectOnWrite(): boolean | cdktf.IResolvable;
    set detectOnWrite(value: boolean | cdktf.IResolvable);
    resetDetectOnWrite(): void;
    get detectOnWriteInput(): any;
    private _driveByDownload?;
    get driveByDownload(): boolean | cdktf.IResolvable;
    set driveByDownload(value: boolean | cdktf.IResolvable);
    resetDriveByDownload(): void;
    get driveByDownloadInput(): any;
    private _driverLoadPrevention?;
    get driverLoadPrevention(): boolean | cdktf.IResolvable;
    set driverLoadPrevention(value: boolean | cdktf.IResolvable);
    resetDriverLoadPrevention(): void;
    get driverLoadPreventionInput(): any;
    private _enabled?;
    get enabled(): boolean | cdktf.IResolvable;
    set enabled(value: boolean | cdktf.IResolvable);
    resetEnabled(): void;
    get enabledInput(): any;
    private _engineFullVisibility?;
    get engineFullVisibility(): boolean | cdktf.IResolvable;
    set engineFullVisibility(value: boolean | cdktf.IResolvable);
    resetEngineFullVisibility(): void;
    get engineFullVisibilityInput(): any;
    private _enhancedDllLoadVisibility?;
    get enhancedDllLoadVisibility(): boolean | cdktf.IResolvable;
    set enhancedDllLoadVisibility(value: boolean | cdktf.IResolvable);
    resetEnhancedDllLoadVisibility(): void;
    get enhancedDllLoadVisibilityInput(): any;
    private _enhancedExploitationVisibility?;
    get enhancedExploitationVisibility(): boolean | cdktf.IResolvable;
    set enhancedExploitationVisibility(value: boolean | cdktf.IResolvable);
    resetEnhancedExploitationVisibility(): void;
    get enhancedExploitationVisibilityInput(): any;
    private _enhancedMlForLargerFiles?;
    get enhancedMlForLargerFiles(): boolean | cdktf.IResolvable;
    set enhancedMlForLargerFiles(value: boolean | cdktf.IResolvable);
    resetEnhancedMlForLargerFiles(): void;
    get enhancedMlForLargerFilesInput(): any;
    private _extendedUserModeData;
    get extendedUserModeData(): PreventionPolicyWindowsExtendedUserModeDataOutputReference;
    putExtendedUserModeData(value: PreventionPolicyWindowsExtendedUserModeData): void;
    resetExtendedUserModeData(): void;
    get extendedUserModeDataInput(): any;
    private _fileEncryption?;
    get fileEncryption(): boolean | cdktf.IResolvable;
    set fileEncryption(value: boolean | cdktf.IResolvable);
    resetFileEncryption(): void;
    get fileEncryptionInput(): any;
    private _fileSystemAccess?;
    get fileSystemAccess(): boolean | cdktf.IResolvable;
    set fileSystemAccess(value: boolean | cdktf.IResolvable);
    resetFileSystemAccess(): void;
    get fileSystemAccessInput(): any;
    private _fileSystemContainment?;
    get fileSystemContainment(): boolean | cdktf.IResolvable;
    set fileSystemContainment(value: boolean | cdktf.IResolvable);
    resetFileSystemContainment(): void;
    get fileSystemContainmentInput(): any;
    private _forceAslr?;
    get forceAslr(): boolean | cdktf.IResolvable;
    set forceAslr(value: boolean | cdktf.IResolvable);
    resetForceAslr(): void;
    get forceAslrInput(): any;
    private _forceDep?;
    get forceDep(): boolean | cdktf.IResolvable;
    set forceDep(value: boolean | cdktf.IResolvable);
    resetForceDep(): void;
    get forceDepInput(): any;
    private _hardwareEnhancedExploitDetection?;
    get hardwareEnhancedExploitDetection(): boolean | cdktf.IResolvable;
    set hardwareEnhancedExploitDetection(value: boolean | cdktf.IResolvable);
    resetHardwareEnhancedExploitDetection(): void;
    get hardwareEnhancedExploitDetectionInput(): any;
    private _heapSprayPreallocation?;
    get heapSprayPreallocation(): boolean | cdktf.IResolvable;
    set heapSprayPreallocation(value: boolean | cdktf.IResolvable);
    resetHeapSprayPreallocation(): void;
    get heapSprayPreallocationInput(): any;
    private _hostGroups?;
    get hostGroups(): string[];
    set hostGroups(value: string[]);
    get hostGroupsInput(): string[];
    private _httpDetections?;
    get httpDetections(): boolean | cdktf.IResolvable;
    set httpDetections(value: boolean | cdktf.IResolvable);
    resetHttpDetections(): void;
    get httpDetectionsInput(): any;
    get id(): any;
    private _intelligenceSourcedThreats?;
    get intelligenceSourcedThreats(): boolean | cdktf.IResolvable;
    set intelligenceSourcedThreats(value: boolean | cdktf.IResolvable);
    resetIntelligenceSourcedThreats(): void;
    get intelligenceSourcedThreatsInput(): any;
    private _interpreterOnly?;
    get interpreterOnly(): boolean | cdktf.IResolvable;
    set interpreterOnly(value: boolean | cdktf.IResolvable);
    resetInterpreterOnly(): void;
    get interpreterOnlyInput(): any;
    private _ioaRuleGroups?;
    get ioaRuleGroups(): string[];
    set ioaRuleGroups(value: string[]);
    get ioaRuleGroupsInput(): string[];
    private _javascriptViaRundll32?;
    get javascriptViaRundll32(): boolean | cdktf.IResolvable;
    set javascriptViaRundll32(value: boolean | cdktf.IResolvable);
    resetJavascriptViaRundll32(): void;
    get javascriptViaRundll32Input(): any;
    get lastUpdated(): any;
    private _locky?;
    get locky(): boolean | cdktf.IResolvable;
    set locky(value: boolean | cdktf.IResolvable);
    resetLocky(): void;
    get lockyInput(): any;
    private _memoryScanning?;
    get memoryScanning(): boolean | cdktf.IResolvable;
    set memoryScanning(value: boolean | cdktf.IResolvable);
    resetMemoryScanning(): void;
    get memoryScanningInput(): any;
    private _memoryScanningScanWithCpu?;
    get memoryScanningScanWithCpu(): boolean | cdktf.IResolvable;
    set memoryScanningScanWithCpu(value: boolean | cdktf.IResolvable);
    resetMemoryScanningScanWithCpu(): void;
    get memoryScanningScanWithCpuInput(): any;
    private _microsoftOfficeFileSuspiciousMacroRemoval?;
    get microsoftOfficeFileSuspiciousMacroRemoval(): boolean | cdktf.IResolvable;
    set microsoftOfficeFileSuspiciousMacroRemoval(value: boolean | cdktf.IResolvable);
    resetMicrosoftOfficeFileSuspiciousMacroRemoval(): void;
    get microsoftOfficeFileSuspiciousMacroRemovalInput(): any;
    private _name?;
    get name(): string;
    set name(value: string);
    get nameInput(): string;
    private _notifyEndUsers?;
    get notifyEndUsers(): boolean | cdktf.IResolvable;
    set notifyEndUsers(value: boolean | cdktf.IResolvable);
    resetNotifyEndUsers(): void;
    get notifyEndUsersInput(): any;
    private _nullPageAllocation?;
    get nullPageAllocation(): boolean | cdktf.IResolvable;
    set nullPageAllocation(value: boolean | cdktf.IResolvable);
    resetNullPageAllocation(): void;
    get nullPageAllocationInput(): any;
    private _onWriteScriptFileVisibility?;
    get onWriteScriptFileVisibility(): boolean | cdktf.IResolvable;
    set onWriteScriptFileVisibility(value: boolean | cdktf.IResolvable);
    resetOnWriteScriptFileVisibility(): void;
    get onWriteScriptFileVisibilityInput(): any;
    private _preventSuspiciousProcesses?;
    get preventSuspiciousProcesses(): boolean | cdktf.IResolvable;
    set preventSuspiciousProcesses(value: boolean | cdktf.IResolvable);
    resetPreventSuspiciousProcesses(): void;
    get preventSuspiciousProcessesInput(): any;
    private _quarantineAndSecurityCenterRegistration?;
    get quarantineAndSecurityCenterRegistration(): boolean | cdktf.IResolvable;
    set quarantineAndSecurityCenterRegistration(value: boolean | cdktf.IResolvable);
    resetQuarantineAndSecurityCenterRegistration(): void;
    get quarantineAndSecurityCenterRegistrationInput(): any;
    private _quarantineOnRemovableMedia?;
    get quarantineOnRemovableMedia(): boolean | cdktf.IResolvable;
    set quarantineOnRemovableMedia(value: boolean | cdktf.IResolvable);
    resetQuarantineOnRemovableMedia(): void;
    get quarantineOnRemovableMediaInput(): any;
    private _quarantineOnWrite?;
    get quarantineOnWrite(): boolean | cdktf.IResolvable;
    set quarantineOnWrite(value: boolean | cdktf.IResolvable);
    resetQuarantineOnWrite(): void;
    get quarantineOnWriteInput(): any;
    private _redactHttpDetectionDetails?;
    get redactHttpDetectionDetails(): boolean | cdktf.IResolvable;
    set redactHttpDetectionDetails(value: boolean | cdktf.IResolvable);
    resetRedactHttpDetectionDetails(): void;
    get redactHttpDetectionDetailsInput(): any;
    private _scriptBasedExecutionMonitoring?;
    get scriptBasedExecutionMonitoring(): boolean | cdktf.IResolvable;
    set scriptBasedExecutionMonitoring(value: boolean | cdktf.IResolvable);
    resetScriptBasedExecutionMonitoring(): void;
    get scriptBasedExecutionMonitoringInput(): any;
    private _sehOverwriteProtection?;
    get sehOverwriteProtection(): boolean | cdktf.IResolvable;
    set sehOverwriteProtection(value: boolean | cdktf.IResolvable);
    resetSehOverwriteProtection(): void;
    get sehOverwriteProtectionInput(): any;
    private _sensorAntiMalware;
    get sensorAntiMalware(): PreventionPolicyWindowsSensorAntiMalwareOutputReference;
    putSensorAntiMalware(value: PreventionPolicyWindowsSensorAntiMalware): void;
    resetSensorAntiMalware(): void;
    get sensorAntiMalwareInput(): any;
    private _sensorAntiMalwareUserInitiated;
    get sensorAntiMalwareUserInitiated(): PreventionPolicyWindowsSensorAntiMalwareUserInitiatedOutputReference;
    putSensorAntiMalwareUserInitiated(value: PreventionPolicyWindowsSensorAntiMalwareUserInitiated): void;
    resetSensorAntiMalwareUserInitiated(): void;
    get sensorAntiMalwareUserInitiatedInput(): any;
    private _sensorTamperingProtection?;
    get sensorTamperingProtection(): boolean | cdktf.IResolvable;
    set sensorTamperingProtection(value: boolean | cdktf.IResolvable);
    resetSensorTamperingProtection(): void;
    get sensorTamperingProtectionInput(): any;
    private _suspiciousFileAnalysis?;
    get suspiciousFileAnalysis(): boolean | cdktf.IResolvable;
    set suspiciousFileAnalysis(value: boolean | cdktf.IResolvable);
    resetSuspiciousFileAnalysis(): void;
    get suspiciousFileAnalysisInput(): any;
    private _suspiciousRegistryOperations?;
    get suspiciousRegistryOperations(): boolean | cdktf.IResolvable;
    set suspiciousRegistryOperations(value: boolean | cdktf.IResolvable);
    resetSuspiciousRegistryOperations(): void;
    get suspiciousRegistryOperationsInput(): any;
    private _suspiciousScriptsAndCommands?;
    get suspiciousScriptsAndCommands(): boolean | cdktf.IResolvable;
    set suspiciousScriptsAndCommands(value: boolean | cdktf.IResolvable);
    resetSuspiciousScriptsAndCommands(): void;
    get suspiciousScriptsAndCommandsInput(): any;
    private _uploadUnknownDetectionRelatedExecutables?;
    get uploadUnknownDetectionRelatedExecutables(): boolean | cdktf.IResolvable;
    set uploadUnknownDetectionRelatedExecutables(value: boolean | cdktf.IResolvable);
    resetUploadUnknownDetectionRelatedExecutables(): void;
    get uploadUnknownDetectionRelatedExecutablesInput(): any;
    private _uploadUnknownExecutables?;
    get uploadUnknownExecutables(): boolean | cdktf.IResolvable;
    set uploadUnknownExecutables(value: boolean | cdktf.IResolvable);
    resetUploadUnknownExecutables(): void;
    get uploadUnknownExecutablesInput(): any;
    private _usbInsertionTriggeredScan?;
    get usbInsertionTriggeredScan(): boolean | cdktf.IResolvable;
    set usbInsertionTriggeredScan(value: boolean | cdktf.IResolvable);
    resetUsbInsertionTriggeredScan(): void;
    get usbInsertionTriggeredScanInput(): any;
    private _volumeShadowCopyAudit?;
    get volumeShadowCopyAudit(): boolean | cdktf.IResolvable;
    set volumeShadowCopyAudit(value: boolean | cdktf.IResolvable);
    resetVolumeShadowCopyAudit(): void;
    get volumeShadowCopyAuditInput(): any;
    private _volumeShadowCopyProtect?;
    get volumeShadowCopyProtect(): boolean | cdktf.IResolvable;
    set volumeShadowCopyProtect(value: boolean | cdktf.IResolvable);
    resetVolumeShadowCopyProtect(): void;
    get volumeShadowCopyProtectInput(): any;
    private _vulnerableDriverProtection?;
    get vulnerableDriverProtection(): boolean | cdktf.IResolvable;
    set vulnerableDriverProtection(value: boolean | cdktf.IResolvable);
    resetVulnerableDriverProtection(): void;
    get vulnerableDriverProtectionInput(): any;
    private _windowsLogonBypassStickyKeys?;
    get windowsLogonBypassStickyKeys(): boolean | cdktf.IResolvable;
    set windowsLogonBypassStickyKeys(value: boolean | cdktf.IResolvable);
    resetWindowsLogonBypassStickyKeys(): void;
    get windowsLogonBypassStickyKeysInput(): any;
    private _wsl2Visibility?;
    get wsl2Visibility(): boolean | cdktf.IResolvable;
    set wsl2Visibility(value: boolean | cdktf.IResolvable);
    resetWsl2Visibility(): void;
    get wsl2VisibilityInput(): any;
    protected synthesizeAttributes(): {
        [name: string]: any;
    };
    protected synthesizeHclAttributes(): {
        [name: string]: any;
    };
}